Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich kann nur von der Benutzung dieser App abraten.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2621946731

Proof data

Record hash (SHA-256)

39dd8f08090138947aa122955cd312be126a0fb311d4f4064284091b6e54c8e8

Signature (Ed25519, base64)

vonmML8sjunvc14mEReXFWu9c7YVU+CO141JZlLW5/1O71ecbOME4GA8UIwQjxanxbCusBfLBoFoMdyb2g7iBA==

Merkle root

3dfdf7381c8d7ad52c2e382f4e16b6f321af764e7eaa340297113fa50b9a0792

Merkle path

["39d6410b659cbe49728daee883cec8132908318509e371068139ac10e5e28459","6de21eeaf3b7cbb4dce6d598e332b1009454346193d4625d66052159150699cd","4b33b4f3914197f731ae4271660744d6ae5d5e0f20506e04a42dd8046cc61849","ecb1d6e218b76949a19221fbd3c49025071cf5d288ef15ec7a3eb3fbc5bda9bd","19e1ec4e3a0988863d90a2652778d9bb01c81d068a970fc9dc87a7663f06da02","5afca679c9d927fa1ca757a12a8f7f1a49fa30e9fed01a31c39c763c9cb6dab3","7720cd365756d3fda9af3d97bd8698008d798ab2f0764e115a16036cd37ab1c6","53ccf3c4ed8ddcac758916ee9485a6e86c009f874c5f56b88a77ac8d7d97ac16","decda20902081beeed6229e7b13b462bb422cb827710426668f9e0577ca4bae9","1899d8b7b25dff27a5f432f5260aec48b98029d1686c6c5316f8bf80d0df3211","39d48e0512c6c858ffe13aa8d9c3cf064696180f1c57f8e2992972537a715189","44707c9175eed8f58c6596b548418c4f1de2c3d95b2bb5964cab0d14f7d1aa45","6a86c1b0b9b1ce71531c9f122b4604e98531a63793a187206bc1aba684cf9b7c","81acff1af3c2bfcaf656a4ff2b93eca8121fe44c1d5b5a4dbce370acad78d2b5","377cd45c8c0bf5fb2c54ade6d9c4a053bed5d007e1a30f5279132a3d565864ef"]

Anchored

2026-08-28

Public log entry

search.sigstore.dev, log index 2621946731 · entry 108e9186e8c5677a0a42…

Expected log hash

ea07e2ac95e2432412286c8e9f169e876b2f38f9762d26c0a0ce3cc128edcf3c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787893493942","kind":"published-quote","locale":"de","page":"brand:legimi","quote":"Ich kann nur von der Benutzung dieser App abraten.","rating":1,"review_date":"2026-06-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=legimi.android.main","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3dfdf7381c8d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.