Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Threema is worth paying the money”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2515439294

Proof data

Record hash (SHA-256)

5e4420ecec936db2032fede0ca276101aff01778f18beb070b02ad0b9b327b16

Signature (Ed25519, base64)

xozOPaUc+h57Z5gO7L3wEXoEPQOOdLNemSWuRIN7+yzHDBagMZ0Pf1b4IgNFtem7CU/uDNb1ITILqvuLB0fDAQ==

Merkle root

8c6268a14330d1a3403c561e774645b0671f81571ec1735d4674ebe1de7502e8

Merkle path

["5e4533006d5116ab4cd3a36d2b5f42768eeda77b6e05c733c3548157e070303f","81cdc703e69673a64ad88f960e2d3354187f68f448988ebdfaa0945fa911c1a5","1bd27ef0a6a46638d0b5f3307d0968f5e65703c3a19dcffb210e9ded96848683","b51282023032cfc09a4ce4f9600cad0155ef26d874a5895552530dd1407aae2e","02a7806041f65ea8581a29813fea303be31dbabbc78e77a519af72793afe622e","7418aa16c68a5ea65738c0dfeb5ea0f271849ce10a79e96e43928396c4f00e49","5a990f4aa374d5a712260ec36ad8b0051fa452ccd0f8e9087896c6457547d75f","7e070cf69f0fd2413205ab02956f2d9d3f29e52686920567bdcc13cc6b3d619d","feaf8dcda2a5ef1059419a701e63126de2db92be53555bc3b29c201dcfa4d508","4c770d2f630df13188a4601e3c3030d785e181a4af4fb5958f6b40f1719d633c","d0813dda54b5b9baffe4883c8b127dc350392bb3f217f0b06dc539311cce42c2","ce9833effd2f39af4fa94d48bdc09e02b01e7a4f23193cf643032d0af108fad0","a130748e37a17fa29f4013443a16c6ba5d7fca63733ddc833e40182a59b453a9","894fb50f273584bf006781fb08f5958320d3e5510a31da0d6339bcf63d847254","f548939ab1bb46e2c6638c372c3e2eef0d561ad18c63c15229fececc951e0b3f"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2515439294 · entry 108e9186e8c5677a4f15…

Expected log hash

128701fddbb19410bf57cdb2d04d7a0278d13bcfda6410d76f176fa58341e1c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787141082461","kind":"published-quote","locale":"en","page":"theme:threema/price/en","quote":"Threema is worth paying the money","rating":5,"review_date":"2025-10-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.threema.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8c6268a14330…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.