Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Je viens d'être débité de 79,99 $”
Google Play · 1/5 · 2026-08-11

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543857133

Proof data

Record hash (SHA-256): 3699566d21e9ac5d9bea5af18c8ab2d724b023f57e78cdc810e0731a381e3500
Signature (Ed25519, base64): XsjAgGiGQ6MydcKPBBun6HKreRTrR8nnKV7+piRZ59nieLVYyTLOxaezNFVP9niJVpzn9bQwVo3a2WcNg2cvCg==
Merkle root: cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path: ["3698d1149d33da0dd66b255fe17577b9995d9d4849772f5851f4546ba6f12a13","a63d285809a7e565c27eca5685b04391f910b6ec00428b23c5acaaa8cfc7be8a","d250f0b372da24261824f43fb4c55e9df2458c00c38b9109d25696d013f396c5","3b20b8edb048c3a0ee6ab0710a7998186cc14afe629632e18eb68dd0a0c68b1e","12e6a24312ddd3b5be051f9a689db4d29c2de7277a6f574398b8f4647d571895","849a4ef95f52a81b2ceb1cf2d695b7b9af986e00ef56159309db73d3aed9e0a0","02ab32501817e2bb865cc78d3dbadf19ce03f4eba40ac4938f4c97b07c2ccf28","38499bb71fa66ae99936e0abf5222a7f67277c582f73bdf6ebbcb4c17089e630","57ce6af8af87a9424ff3033555596d6cd46a89de67855f14561479e03df9b25a","fff0b3b25866d82fde8409f8364f2a6ac66b97eca1aac62257fc8191cc897682","3cb981bdedf9fa7c8f66aabee503ed7ca4c8c0f02a38228685b5a5353c5f51c3","e1fa6f392433e3742115b528fbb62d17c8e73f75e679923586644340f2657a0d","78c0401d7b513e155708f2181665b03a093a6cddbc8233872a0fe76421b285c1","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash: d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787288037224","kind":"published-quote","locale":"fr","page":"theme:proton/billing/fr","quote":"Je viens d'être débité de 79,99 $","rating":1,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.