Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“In the end, I got a refund of €4”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
558d0e7045f4e2e911166af3c668d301cf7d88003b866fed4c39b1811788bb6f
Signature (Ed25519, base64)
MpABreE7E6WTmzUJCvMC0CDghjQMROXGhkAbB1XSyYPiJUmPPtJfpMuJFjygdRKFR4YKgDxTX67DWwJrLTOeDw==
Merkle root
6d3f7b9a732acc39631b9b7a5990b6471bf710c9f84e5623c7b4ff4e1ce78326
Merkle path
["558b83748d5cd5825dac3654cdfd6faad716af77372e10768e2a8bd071f1a7ed","772d96e398e19a3d7b21dcef3cbdef56a0c03bba3ae1b917c92bda3a938372fa","3d4c171cbb860619163f0a79e8929096d17ef32c348ece38d4ce9cc19b03b7f7","55107d2cffb56a72cffc2a5d20c2254662d6c0429fcbd91b0e6a1d6d5e60055c","1bac0eacc1b1e016a45a199589fe328aef95075bca5a776612724cd22754fb05","2f8aeff4c106ea6ef52909f6be2880947511ca519afc923fb71cf7f532769a24","6ee78eb41a2c4062c82b5db3a5d94d0fca76963f6880f548e03f50c462499833","da4166d85a3f9a4fcde1ea59b1822228712be0ad8129f514b78d10c38b0c50c6","769652a94cef9ff82f3785de4b09ffbe8df97cce763651fa3cbad1ae9a9018f8","191f42e3583733313754cb4c385f5cdb5d68eb56605d21dc544ca117ed61ede7","e6e61858d0b1413b26ee13e8bd290796415156f4047cf49fbe067d7b7c4583c4","1e95a09de315cb08f89ed98f429a4fe8c776a87cd32717e41a2d55b5141911c1","43e340826c4a804ec6f5908b8b1b615e9056e8f44741be501b225d60c6223909","d55f41ae09ca42c33bbe39db949f63edb982eb2698def5511ce57c4f872a5c0f","6036173d1fecc6618a44f9a6eac2357cbf937f65066abe2621a2b8d1580705f1"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3123541116 · entry 108e9186e8c5677ad86d…
Expected log hash
9205615d16e6f0d1c04ec96882a0dde4bf091f63aaa636cea18cbbe885fd5227 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791346951310","kind":"published-quote","locale":"en","page":"theme:taxfix/returns/en","quote":"In the end, I got a refund of €4","rating":1,"review_date":"2026-06-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6d3f7b9a732a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.