Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Mein Geld nach Widerruf wurde nicht erstattet.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2929513415

Proof data

Record hash (SHA-256)

4ea466fc13020ee78ef1528deb584feeac45e3b321c5e4d2269f78b92f34ea74

Signature (Ed25519, base64)

xxq43WQ7RZ7Ds6l+3oKQ16sgAOdYl6H6VuVzronnxgT6pQ2wCUoIQuBgytoZmNdTdO/JLOBVUefCgQzPMtd4Bw==

Merkle root

277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2

Merkle path

["4ea01bdcd2644284f89c7da1992aa9b6c2824518646972c3a2ed061cc30c80b0","3824558052205f35966e6333fdccb4685bf7d3c0469aee0d440b0e1efb1df484","023410bde96802e0721f4786932b08bcc3fc9b611dd5bdadf30eb97560cdc490","4b1151f54be3c95895020f1e60fd343a6cbaa6a18a9d82764b02e4e7933e45eb","e9d07aa7e80e52d59148d25baab33eae6bade8cd986e15c1986827d79f59071a","f2d81ded11302b6412bc22a6129d76e9659cc988a827043921c80836c0d6c71a","4d8e00afbfe74d068656ccaae9bdc56b55ca97b61523fa673feb44e578e5751d","6b4cb13ee7d1c1587b7be8b721b0977d5bec983e9ab2d2758a02067bd5277fef","1501e37ee60eb45cd9e417375e3786cd15c48df0b4fa610eb33f7c40732da020","ba412c0a33b939046c4d803ba45abb0100f207eb5dc8a0e9cf867cac895e24da","6e1ee16f3131f0ee4effcd141fc18e644a2ada1746f728e160279367de9fb320","08d436ad4fa021498eed4058dfe84f0e9c3d3cac5445818b8176159d8b6843e1","8455d91e0d89d90a64ff5b7b26c228f01990ce53c1dcfadc629ce9d6ce5ae519","3877db10b6c6cae54d2b07bf0b4ebaa05236dbdf377db3895f407f63dda42bdc","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]

Anchored

2026-09-24

Public log entry

search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…

Expected log hash

9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790137911951","kind":"published-quote","locale":"de","page":"theme:taxfix/returns/de","quote":"Mein Geld nach Widerruf wurde nicht erstattet.","rating":1,"review_date":"2026-06-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.