Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“fragt immer wieder nach Mail-Adresse”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5016fdc9d3061e5e37d6f70c83f9e280dfe4741887ab51a9299bbbfe4fd1960d
Signature (Ed25519, base64)
JAkP2kGKN8r8/w0ORsIhcxb2hHd9zzDnIQYkbGkPw1Fz5rjghY4KLrDmO557JO51FsYlrYBC5b88wWS3Eb8qAA==
Merkle root
2d214bb14438515f4bedf5edd9b00a6a5113a016ba9b9fe8160d41d7e6046722
Merkle path
["501774e697f5b1519dcb581d185e7d2ec550c4d0a1c2662b7d540ba9470a4d0e","aef3aea03c491a619d30fa9881495b03c5d40de372ff5a4e2342afee63f3e42b","4444f8deb8e4333ce1dc38c062c05cae513bf3cccdee64e0709d2c245427e8ac","7b40cd19305aa2fdde29f1ee9675f690f45dcb83eb9f5c47df270a156285cd35","ff196c3863bb7612705180f3748530fe5a7df046383d1f363b3cc4da8a467470","7ca5afc0e985bbbe083ac83998dc5a3682a00069de7a249bdd453aad3f6e9c86","ce47651b94c741c004ebfc79b16d53654db95ef7578ac7126e425f079e46ffec","c863094170048e6bc9cb6484817dd5e245e49aae6e8a651ba4962d26eabe7aca","4c934a0518e0d85dcfce994b197b1122b8099886eb4786a36f54027a709360e0","5a7e4e1a963dbccd6dd1255a198cef96d5695bc0e8e7231eff36c8b88b0ff339","99018faa5ad0d28664cdf895a0d291f9e9325e68283ffe73dba89bb27fc962ba","23123a46a6d30e0fa59a691fbe1dcdcf32ad32c111bb8e37438ac91b1152017e","184cc1e2f93da59337f7837161587a67303bd364329773d15b922bec0848e3b3","35ea2df06612b261a549235c4e62b3e1ad1789f05da56f9ca671421e5071b72b"]
Anchored
2026-10-12
Public log entry
search.sigstore.dev, log index 3220562278 · entry 108e9186e8c5677a2753…
Expected log hash
13907aa3d3da271016c4b5e75946c4440692c6b4e1684187b965dbb983b157f7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791777669660","kind":"published-quote","locale":"de","page":"brand:atupri","quote":"fragt immer wieder nach Mail-Adresse","rating":1,"review_date":"2026-07-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2d214bb14438…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.