Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“sans publicité ni vol de données à outrance”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
40ee3e6540795f29c6ae2823954010e16526dfec366270b6286ea3cd3eafbd8e
Signature (Ed25519, base64)
MtAKQfgNjNlQpD4R0nCBh2eUzncMJnBL4wUXVoPH9t/d7qR4LnuE6lltHoaWGZjwjykkOXV/w30GaA+3ArMsBg==
Merkle root
13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725
Merkle path
["40edd4a856b055dd40d0f43f76992b8267a6994063a45527e46b147730dd0e9e","08d028d7d6285c9cb85d63abb9c4f26e7a1e572624fddf6ba3528b3f14c3edb2","26b4ddde5371663ff0e3eba3c4cedeff85afcba8308e727a86ec21b9ce26cc3c","34f2bc480d29572e853e7d6b756516ae8efdd5aab4e432891024bcba47d2a6a3","9acfe3ce2bd8641d2c273c2e6747f0f75974fb305180ca7289a10a68d4d5ab44","c65312298935527610228441764b7b889e1bcf8b3687c5721e659bf74aae379b","11b784072522e2a650c3852816d572b6b2563cfefa6d588ed4ae148daecb3135","7510e29d93c092a3148444df0f26bf2c19d0ddedf2f5859ab05ea4fbd809b96e","ac235b23e2a3a9faf549883af0f0c90834b107fb58fc076f9e659cb23345b44f","6695d8cead7c71f55607732b7af428687af2536401dc1ddc2c365935ed78887d","ee167a5ce96d9cca660e7de15f8aee75e89123f37bba70a88ec46bfbf76eadd4","a8f7acf9b6cd54c646cd7bd9b5039bf9ed3fbb62110c855f7dfe16810722b2af","def79475a5b87d823ffaa82cf9c802a7968dccfbc8519501ee364e037c0e7931","9c23963b54ac666752e013737b81ec6a31e3529ac67f9360ca3657ae9a4b72b0","bc9aae2a90fd8d311435fb1459ac7953f7f2923aa1b697bb0b40101796e3503b"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…
Expected log hash
44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787279544668","kind":"published-quote","locale":"fr","page":"theme:infomaniak/billing/fr","quote":"sans publicité ni vol de données à outrance","rating":5,"review_date":"2024-09-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.