Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“You don't need to make an account!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
35f5487e5bc85e8d279ff5480136e6a6183f891907b44b4cba10abea38db0517
Signature (Ed25519, base64)
AHJmcBIBrpc8ujva/5Y2MIZlBIW1HlJV2dxdrhGgvWG8H0IwpCx8+j1ftx0uOCpJh6i4bGGiEiZnnT/mKBGXBA==
Merkle root
714fd5c453665fb7238b83bb755c09ceea4f24c6bb04f621046ea8b9d5da1a83
Merkle path
["35f6b34482b908512b2c3fc29d7330fef35e9f8b3d1700d4b183086663dd64fd","8c2808d88d327778103528ed8c1f30e43dceaa8333a42b1eb5685f52aa27277f","44c988738fdee4d595a2ca62ea411dabef9a93736ddcfc2238fcbc978b6840cd","ac12eae6e2636a64223d0c76ff81dd1aa12b8ea39faecec790d02ae292aca90f","1cd39e09adc6bf639f2279fcd89a03607467051321f6f6cdc70bc5901e8ea214","c9ef27226e494851030ebe812d3898f64c0669c18173e4604954aca601c53d2d","3e54b0a3ac2a8f0739ff474e1fc2d95ca3b6fd76f9a63bfb0f1065d4af2bc5f1","697342b32f2eb4cdf7461521a329854c4e24d71e1b0ce1aa37ab21059478ab44","29b51fdee9fbe2a4c955f62f9a10abe555b3c826804cb10b3c3a6534bc640dda","3148e189cb2a4258b205aaa86255b3ecc93344ba2081c5bdb62550b3b3993b8e","04e363dc9a514eeaf97e4553084eaaa175e4d5470c4a0d08bf343fca36eab1d6","9d4aac16fc2f1c28d2f212f9f82ead6586570dbbd5beee78442716c57425577e","845fdb47367ecc34e59993e716bac94f091281e8b7d978616b0716239d2f69bc","a74e96815829544928f52d566d2e0783f4233c64b908a508f65038e2ffa1590b","0657d6cbf3a92507a9a9b11146527ccd4ea9969d68d2d85c40e1ac60d2ab4392"]
Anchored
2026-09-27
Public log entry
search.sigstore.dev, log index 2969645630 · entry 108e9186e8c5677ac05f…
Expected log hash
9c269d3e82dba16de30aab3330968f6013b6b7908bdb2f7b3ce0083771a2fe3e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790397996853","kind":"published-quote","locale":"de","page":"brand:pdffiller","quote":"You don't need to make an account!","rating":4,"review_date":"2026-06-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.pdffiller","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (714fd5c45366…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.