Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Trying to recuperate my money.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
41a5c5bcbc980213d87221c274950bb97b0c01ec01d1b7ef7882f9684cb0f1cc
Signature (Ed25519, base64)
4TW1qIhTIkCVVr/3GAmnLCc8VsLAdP+2g4twsLzaIMUSBIU8Rt3GoZ0OIeYctARxEoSWwWJEVeGSqWVIACXZBA==
Merkle root
b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c
Merkle path
["41af47913054db2a6de80767499816b6cdcf22146857fdf81b4ff57eb8620faa","5bbbe9d66748538caa642d268dc3b8f15caeabcc6ff156c958c71385ad73f32d","56f9d7d6c3ada8bbbe9031e833cc80ea2012cef9536f957c05b6bffb8de1525e","b954a50e562908cae7f759a79afbc4f44b436358cba8e39f8fa36166c414c592","32d698e5d38b2b9172c500451ea2525369223fb9313cc9bc0883b68b05018de1","9e4b25b9e1082b8701bc5966263cfdcc71568c5ee3dba3363f9f810d76e4ccc4","244267349c694791a92624f2c52388695646ad571e184b12b986ead82937327b","2a77ee324946b2ebe7ceb995be07301d5ecbd3f44f4508d3034ad7204dfd3fec","ef90acf88b9b7f664d7dd80ab2c089e7f5e0566a8530e8d237aa86095f748c28","092fef408f408e9d0d5099a88dc85d5aab5da2f5251c40c36d3ac42da221d3d4","9c05482c182ad0e5a1bdc91cec6243e52c25ea3e684a9ae7d07b22e381f0169f","06ebcf4f421280990aa40be72bace95a1c58897501e8472347512cbf61f3441a","1c4a3fbf336b1dbbe624a981829b71610e2551e155c099783fe5f318fcf85e8a","0e90fbed1cd619e0c2620a1f61162a7af0ed873785a7985f4469ef4721ad000f","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…
Expected log hash
687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787134378129","kind":"published-quote","locale":"de","page":"theme:relai/returns/de","quote":"Trying to recuperate my money.","rating":1,"review_date":"2024-11-26","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.