Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ils n'ont pas répondu à l'e-mail pour le remboursement.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542443729

Proof data

Record hash (SHA-256)

534113d78066736eae98a27172019c303ed01819e6847ef97f9069d69fbf660a

Signature (Ed25519, base64)

J06iIo07XzHZdmYtOJKXzj+0jZp0xUOd5tW08kgc83TGGnZGdOygkyAJDMk6Ld5W3rUIAVrGHiLY+ikdRBFPDg==

Merkle root

4354cafe0e2ee66c200238a4bfe005f997e761de26d9e528ed6c12dfe1b33129

Merkle path

["533ffdc90254ad5b46ef382e77a9345ca4d0ca8f7d74c2176a784d4d7d271b26","96727f85d5ab6065f9ebcf4a72599819200cdaa099df91f8b6e84e237b4f8e1f","c118cb8017928f873a461d64b42c586eadcd7d46b3f59183a84dc0cce9491588","e6917130504f8bb2a02e8daa1bb0ae2a8520d00ed1cc13cf3fdce3497738f770","d31ce58cbc29edd21246b59d0f93a71d2a5b1b8331c907c3c9c2bf49a19e65ee","613d5edd97b1bdc0d4d80857177839bde8f4abba49e390cf6e26e0544683dc74","cfcc224fb401390a7415044e9a347f2a9800f4f39dfb53a9be296ebbc3d8008e","f727303ef75c076f06bb79cd8c39ee567a552458f56e8831f40050f1bec35611","17e30785a2a631ebda00ba250712939dc09a79612e858bf76aa01b9478c43d86","405e3d38b637c41b1de1750ddde8757652cc4eab27130e8c6d3c2b1782296d47","d2616f6d65b2f4409a079b3e9ef0b18cd64ac26615e2f7a71920fcc57426c9e7","6d06995c4a8d4636eedc1c1a685a022662105430e402cda45cfbbf9aa02bba47","9140d989b81fafc680755d11a4b8c52937a3122780c511f6f10e0958acb02489","34012874980befa2c4e79572fde2605e3883df8e5878fe4daaeaa8bcd10c4d2a","16ed4be9ece293c235c5510e2cd19a05055f034548e73c12f8a9947de7b32591"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542443729 · entry 108e9186e8c5677aface…

Expected log hash

1f12c9d846c7a9fd8aeda84057eb4d8f639bf78886a62c6290a2a60cd48e0812 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787280389476","kind":"published-quote","locale":"fr","page":"theme:proton/communication/fr","quote":"Ils n'ont pas répondu à l'e-mail pour le remboursement.","rating":1,"review_date":"2026-08-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4354cafe0e2e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.