Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“pour acheter des bitcoins”
Google Play · 5/5 · 2026-02-02

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514130917

Proof data

Record hash (SHA-256): 533a256ad2084687b5e2fa29eeec12292273e1ebc9b641edf1073a0ea91e0933
Signature (Ed25519, base64): +p4zr6hibqHuRv8TwOxyI0cnrCxsNIb5CR2Oc4NLkqMD1UEW6i69T1j9BzUtM11UpCiOueDe7oGWlbDpDfYcBw==
Merkle root: 72711ef72b8a7ab084630b9628ceb2defcf0aae546304d44ed173db57929457f
Merkle path: ["53311cba97e765b5fa14fd887c635776aca6b7e59891aaac2d95b1b77ba39905","c0c0e966b9afb2fbbda55a943cfe3e472e607cf0dd58777a8707cbabd9beef2d","6fb2a435ba534655b71e2124059b21500fc9d98587791bfb02d30f06ccdb8ef9","a7c17e59ae71da65a64b25b53d6c30ede67e93ad5ae9f2976168280a118a84bf","aaf217f4a769064a663998389f775f0ca0a1d41de7fd7c428ad13db94ba286c6","0878aca61799e047da36155861c680787957c38fdbcbc1f842b83a695a4ad654","7feb6d8eb4b860a81e339658f3f0e7e5e524539539a878a35fc9996eafc40cf2","cc7be62bd15a9452680d006d0d218b79cddf6a8dad03debb01dd82bf4ecc879c","51af2358102359da92c07f3450e86449356ebd7d768d3a92e19df944ee5943fa","1ee565f7d7935c0965d53fedb482b7b02bcfbd1663ad8771336233da11d8bafc","40e16fc868be782ae7d38ebcb8b3e1c8223666031ca2f4d7404a34467f6f1e45","f4b6ab500bd9073ae5e1b7397b8981d9311aeaca88bcf4df62dc48c6a78ca29d","df0544cc6d117b2c1219b42bc812fe38a4da44c84c48c7c3bc89f0690bd5d665","768946b507e7dea873e9570265486799703565faf3780e57d953562adfb568fa","6eb04938b6a483bb163369a1d918b32576dde0943755b89bf4c6d18743828ba3"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514130917 · entry 108e9186e8c5677a3273…
Expected log hash: 65ba51eff926c65ed0ce093a942d84c628d811a59302f32867c6589627e47792 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787124488047","kind":"published-quote","locale":"fr","page":"product:relai/app/fr","quote":"pour acheter des bitcoins","rating":5,"review_date":"2026-02-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (72711ef72b8a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.