Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Die Postkartenapp funktioniert noch besser seit dem letzten Update.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2495053720

Proof data

Record hash (SHA-256)

5cc7b800b55d4f4dbcd7c8785cca601c754f9462142b9cabafb12ae3adc6ffe1

Signature (Ed25519, base64)

Ev8agmJ58dbyK43aQsuu2QB1w1p2iNf/CoYpQQlWDC5ecenCt+XGTbyhrzdoT5BztbYtZHzwS8tqNORS/kvHDw==

Merkle root

2a2a7512f4cd1b2d7f9a14c5eab7134b14600f50da8f4370f00e3d07bc999793

Merkle path

["5cc15a605b81583141ca62f3ef1bc9caf6a8cbc404807ad77e7f7998dc3c9f26","48d3f18f8c351763ddcd8b4bff3d8f7ffdae353cdd18adcb23d36da22c922fc7","8d22d4ceac888012e89f79c2f3a814b13907e9e2eac9ae93e5ab7a5498f136fd","d572a45ad18b235a0c584ab249b3485c09702f560c8c776d35dd9653d8686e96","b28abcfd3aa561f55b9a467f10de84c3b5a302aa5965ac51e1ca3aae4908dd63","553f0251c55926494f3180dfbd3d88577742a3a52af274bdf2e854637ec44b8d","bcabc9f7a10b56dd166ea6db339b11e825b59963e58c7fc9aa5e88ab279c3311","9509645440f25b6f7c99002462c66259946535e83796b3dcbd7167a6d39ef473","dc7671a89b31356c028931bd7e6e6dd33e1437f141dca84c247c04d473dd6018","b5b39a4fddd20c685686297056049d181fa081efc950320e49c82616bd087375","da04cb5393c1d042f837ba877cb760edad9e4defdd737ce9845aac148a9f1393","d803838c8b6ef82acfb81025d8ff652607a1ff691cb9720409c802c2082cee40","08f159c1b448155e539c550736650c8df7331f5a0cddcb7830a0685dcdd5a2db","050f107cdb1609dc86518317886321e69049b34a0448f95e4f79cacf68b9e781","01b2a2b6a3360163596fb2e0a65565dfe0e65177610b2a84b39de142f1dcaafd"]

Anchored

2026-08-17

Public log entry

search.sigstore.dev, log index 2495053720 · entry 108e9186e8c5677aab36…

Expected log hash

ed6074196ec9b1cfadaf17693ba1200791d122c6ee9d44d772fe27e3b176290a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786933230052","kind":"published-quote","locale":"de","page":"product:pixum/fotokarten/de","quote":"Die Postkartenapp funktioniert noch besser seit dem letzten Update.","rating":5,"review_date":"2026-06-03","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XFAB7C17C298F48909E8C9F2BFAA5794B.html","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2a2a7512f4cd…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.