Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Cloud sécurisé”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
36b5e5da06d33c38346587c3d10a5b37bf9722feb00b9a3bcc192332cf13cca3
Signature (Ed25519, base64)
9TpIp64Dx803Mz9xY9Dbqf02K+kjpXxwnD7pWzmuQjDlLaAX2YntpDntdq2IojCU4pBMA0hpIR2kYi/DXHBNDw==
Merkle root
9ca8f1c1ad15a78206ceaec922c537c0b0ac598e12c9c25877f5e0e19de38c6e
Merkle path
["36b79a88afccbe6b83ed306d3a645abd429fd4668f8396deb08406dab24f7a28","941730491e1565d73906eb202adc723e681e327f70e19e32a054b0733475339a","dcd1d8ae02c617a47d773179a2b336b573655455e2838a032499a63d775a621b","e0337d1fb66bfc3f2efcd9f9624bfc152deaf71b3e0f2cbb6bc6a9b032feda6d","50231f197099046a3d623e0a3272cfa0d9765e022d1f7b0c386f7672de6b79c9","8a0ddfc07819d776232c4de0401e888ac0673a60f62d4832873503c1843814e5","3d31808f742e9a6d3b52c017ba77c2e638d2cc15ae0af7af0b5a1ff6871774ee","d565157a7d5905a31677e01b5afe4d936db0f4ae26be52a7e71d6d72ef636125","59a69c26bcff5fb35f885a7e9b769c993c9ec9eb85ebf227a65df0b255224679","b2f7eeede7a4e0e04768df8efc15769b9db3766d3c77da7908e37b75ab206f5d","c3ec0e4ae869b96bebe38872fae500cc108b653e8e3431d913788325f4f7e7b1","6cfa292ea4c59c0be00d2f66970090451a732bc5a1aa0d6c7f7fb04538bf6096","eaefccb0e1aa85682b1d5eb0fdeac76007d7f9e97f87d680b9b26b421dc772f5","78e3a01c18db7a3aa85fa160432e1aa22e4b131e9c27c5e2e4566764a2ee13b9","deb69ba818cac6d60ad262ee5febe93ecfd14e4c978778af299f82ef8a69b934"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543154575 · entry 108e9186e8c5677a0eab…
Expected log hash
0099eed9d12aa99aaa44ed875b87ffaf90c46527b61dfd92cdd4db2c148aef65 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787284115102","kind":"published-quote","locale":"fr","page":"product:infomaniak/public-cloud-iaas/fr","quote":"Cloud sécurisé","rating":5,"review_date":"2026-05-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ca8f1c1ad15…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.