Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“schnell und sicher”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2684302363

Proof data

Record hash (SHA-256)

38d9e218700f620ea5299d8a569592199f8c225c8b0b365cfdbc041d808c5f45

Signature (Ed25519, base64)

qc8VAa/FpnoYeCivWwHa5bc5zPfMlk0k4OG5xtA/3cyPS/9LI32AA7XJXj8mhxGjkU2m48ES+or63P9t3u7KAg==

Merkle root

5e3f2e41cc1fd7787192ebeb079af6f990c775b2053326f968115de8dd824e71

Merkle path

["38de097a983160b59f11caead853829d22da64dac9f3fc7188a0132fdba18d22","2763421bf2d6bbc7232f9fa1f1c98ce0d9a76c237f0e4359a2bd177b76efa41d","d2056a89aaaac34809f4f9dffc532344702537e495ce06ef64e0d77740dc14a1","f38349b344ad5e50515c8c2a218337dd54aa723f1e026d900795fb5d03c0c02f","0061d15059a391dbd2a9e32e48b21cf898fca677dfad87af641dff5c359adc3b","bc53427d089382ab053d8c89430de99c1cd8ad4b13abe1fa76e5d97468942ab0","522978dc05c62e17bd300257f4838470c65c47a9e054ba85e5fbd3e209897346","6a432a22a44f2ece64bef4f26daa3e7262e4293fb8a767d643a4232a555076be","ae37d6bc432cfc93524cdb5e70812683f4f1481e99c5cb335d66a899d0e34b1b","27e41ceb1130b87ecce3fbaf06bdd8bd2e6c6cfc878354e4a4cb05147af511af","9174207cebaf737badc4dd9fe6adf56e3be2a51510aa35d54c7cad30ee3b7693","a2f9977b12f573f09aead38e62e17e067b16fe144adb1d1c3a3210bc5b2794ad","b571faf3453f3039b38742c332dbcb628f2c1dfbf5ec857c3d7769d1da16d67f","2afb6d36d3d2375210a57a6488ab98a278bb5bbb8e375833e605929207041f4b","a4325d4ccf36fc7ceaf4f8f3c2f4337a81e5e52c1c81c4c2185006d4bb2f79fe"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2684302363 · entry 108e9186e8c5677aca75…

Expected log hash

ee19ff36df511a8edb29d6951b6df42f660405614fb2aab70f8340010708e45d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788336966085","kind":"published-quote","locale":"de","page":"theme:acrobat/delivery/de","quote":"schnell und sicher","rating":5,"review_date":"2025-08-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5e3f2e41cc1f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.