Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It was only possible to make the one-time payment on the website”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5913f05240255e12f5d051860a82b0c94b9d0affd5bd7fc19adf3edf00bba46a
Signature (Ed25519, base64)
MLOLtXi0fORmXupXZaUqTH9Y+rNgq1t+3FHDpl5GnLwcAGVQ9mzbl2jX+BI6Xx44eq4Sp9898rOSPGMaf2yuDQ==
Merkle root
6953a5ba9bd00082fa1986982a5979aa7ad5b4654ec368f8d247f13243e4e4b8
Merkle path
["5917cbaba0fe82615cd0e2fdb626fb0777dd2caa029ebbf554248abcae0614ff","56eca3e63c3a667634a49c987ecbd09ae2db7afdd008c22e0af1802764e4bbec","20cdeb6ddbbe5cbbeee54081ccf44476769e5f417cee3e00111109ca045b2dd8","912d25bdf8702fb737ffbf00bd5ca43c790212be2446535ccf84ba3ed489c28e","41750baf282f95089b8bb275d7d0612c9299548c6cd7b2df08b4348706e50251","07ac1471c8f3605aad3e236c3581628765eef45f21aa6ecd92672fc17ec7cb95","2039c04c82f58ae134078c19921db1a9173eb3624be83e05b30885bd069eed74","22856359708e29f8247623cf0eb9d87a65b2de89fb183d4635f31dd5e74aa7c1","6043e6d2abfe95a2dec80415fbd10a8cfd58a0a54dee9d7f77575d7b829cb845","8b0635beb378af68ca8bc5d67db733c0ab86604c3dc509ae498aab2e1774a104","2a98c90af67480f4585f64bb5f74f1cbd21dee5af23b3b08ca69e20faf615211","4712a5b33b6ff50d50cb0d169be1d0e243fc91c6e42666afbd10d27e6febb385","3d6624c631c3f201b337a52bc4f9494c99366c0aa74b4db152cef1b6807b4800","98a14e6f55278d0c3f64d31e6bb09545a033fdb7dd6455363be23426eb85b044"]
Anchored
2026-10-16
Public log entry
search.sigstore.dev, log index 3273053873 · entry 108e9186e8c5677adb5c…
Expected log hash
8e660c0f9c2f4acb2461077e20036379bc945573437a296969373758a8dbffb8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792120102008","kind":"published-quote","locale":"en","page":"brand:taxfix","quote":"It was only possible to make the one-time payment on the website","rating":1,"review_date":"2026-09-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6953a5ba9bd0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.