Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Zugang würde dann über VPN erfolgen”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
54021a5a319cd31a3a9dbbbfc401ed147f9d9e1dc914e8c2503e1c51db39bae5
Signature (Ed25519, base64)
js/WK6fG4NkTtkiA6tmifsB85e60wvJyGJHwTnriaABmM7RX8WyjPzHFUH9Hh8BGdD3tihTZ8gLRrfvOpg1yDQ==
Merkle root
b9a08f9d6d76dd148110a496219c42cf3205c6f982800d84d5c85d77e9461e02
Merkle path
["5401dbf85284711938b1d7d1875cd68f4089b9a86de6ef07fce1b05da603cdcd","6386b94e3b041e2a47b4c5254ef42e2851013ffb2de22df9503610fcd5b6e7b5","067ae00338ada7398389213a804f0f32923265d337221fe3631294780064bfc3","2f34792d39d5a415fa5f4be0d1828493b00d12a59fdd39735195ba871a70d145","66bd164a91c5b881ef624c3b0c63edb75b7673b9785d6fb39f25870aa18af3d0","7a118bdfbedb4d7d070dee7fd91881ffb1754aa38070a2fff25c3f5f8ed800de","4660d308aaac31b7a104139ac3f6d33948774900b983c7362b2d963ab92beed1","d24a1a98024e24cd917f9bb1bbec69dbd767918fe9d90466a0a10990052d62d7","0618a322ce6b079e6b3825feef5e95a758d6a67a2737a764f76491f483c37ad2","ad0aae11f52bbbb06ea51de50925d251a694c98865b17a3619de68e30bfbd477","87d389c83fd89e992a96d0b9792dec0eff9c6544ae6310a697648d3aba29323d","0197d988959ac12f7d8946ff2581c88b7ba9a4305193828cca53fbbb9832a064","bcc0d977b8ab2060a87584efe5d0f5545e840726716d3f02c248db108122259f","6c299608515c69a03540be35865f96ca4932f3e0403f8f39fb0e1c2e2aedffb4","43a562d6822dab12c673c1efa0a3171d1ef69b949f676fb01847e1e5b56274de"]
Anchored
2026-09-22
Public log entry
search.sigstore.dev, log index 2907673729 · entry 108e9186e8c5677a06ea…
Expected log hash
bf9a74000249ba6e66b1e29aae9d8cb95c3400dc118569a80e5c0949f3e8ac62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789969984102","kind":"published-quote","locale":"de","page":"theme:v-zug/quality/de","quote":"Zugang würde dann über VPN erfolgen","rating":2,"review_date":"2025-11-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vzug.home","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b9a08f9d6d76…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.