Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“super klappt perfekt”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3220996539

Proof data

Record hash (SHA-256)

514b984791aecc527275221bf66950e996ddf660fc3dd74b10fdd0099a929f3a

Signature (Ed25519, base64)

qN1ean2Jk44vBNOU1j5tMBFm8GIWfAZT4pq4HU4nbmQ33bLbL7+swMfzSMHaX2hmpfWluuCjpvyIzBYDtSW1BQ==

Merkle root

1b0b408c7cf60721bf3cca50f4b7f268b0858a42fba11906e486c6694252cb22

Merkle path

["5148c7f490d0e8d6814ec3ad6ad9247090c028056b184cbccc6f91a95d72a474","d7efaba63af3550fb582ae6c4ff80addab9dadd6e619bfeb6d001b160a6ff511","65e1ce8d79b6aa2549cec2db5c8a986d7f509e281669c1a31f288e6842c060ab","4ab18eda6a32999e8d8186c1d62f0cb347b6db339f336d2ddab95d62a2ee4980","5874326bdc66b5b740284aa3770aa12a7aeaeb4eac2eb9f80e320e51ebd26507","7fc503a43c893671a3b178321a432b93d0c50b856b31c956041c325e0a5b7702","6e13893b5e91529f59bb84310964321a29e3670e23fcd871dca6c0f6ec9f873a","aced99f91b51b2e7e424f372f1eb1ce5442e1671dee623ce7fb8844f6048460b","5312297f0767e3845880a3acef739c1d98ae2b842c87e2f0e6938748b9a997f8","c29ebf7cd77050ea1ec26b3571d03df5ce670b85430cd288a957493f195de050","e17d8e9ff94efe92b55c6dd5f917ff12be0cdde94f4a34cd1badcff751846bb5","cf447dfb6dce6b5d81ae8302a2a58a74ffebf3f56c78349476d09cc10653e60d","a35aaf4615d6d52528c83ebb3bc75a27f09df1b160bd5ce58f5b6dfb09d28482","8547750c311d384cbb1a945300d6b6fb4f4bd2b78af7177366b3baa4b4c1e724"]

Anchored

2026-10-12

Public log entry

search.sigstore.dev, log index 3220996539 · entry 108e9186e8c5677add5d…

Expected log hash

00694de1434e648cba57bf07fb439ed90ba501083441667555bcf619bf5edce8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791779426071","kind":"published-quote","locale":"de","page":"theme:zasta/quality/de","quote":"super klappt perfekt","rating":5,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b0b408c7cf6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.