Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“hat super funktioniert”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5e533bd3fc4f80cd8587c18ece9fc775ddd027455b25bdba30f9bcd59f2a31c2
Signature (Ed25519, base64)
1l7FLS4oaJEloChJKxSdMbjVAYYM6EgJk2bWaeAnb2Xfv5Z1ADq/xy1o6I1QgMrUXUk69vD7vdLrNWEa8XNxBQ==
Merkle root
feb82b7f8aea18b46b248fac49fdc21a6b138fec64dc2fa12c4b3c7a81799706
Merkle path
["5e50784883719102ffa8c582b60a135b205d1ddfc543b0618665324a1242c50e","2d8bde92d04aea1f1c8505ae23054da9fb27b43e050cfbf3008fde2d8c3f0bdb","c300e4e02131eb900effd78bebef370ec43f7b6c3564329b840f99b5e211b264","8baba861b09c654a44b684b109c260bfdf1512934cf848db6eff7006b26f16c3","996e8dde33fe2dba22500dfd57f0c7c7738b29abe493258700200fb32497838e","79664425d8e0376690fc5d7569f01281004e2b87c8728c5ecf37c87b8379e4fe","2a621279316b633d1f54330d524b2c9a17c11971a36a11764a914cf5a8ec49c4","0e7a734ee9020bb654b7042ae612bd4dadeb56eb8e3ced4cf4ff6664f5238962","ff5f6271cdd528079687646bb5c217ff46590cb7f6a849417051ab930efb9a73","c5ae484e325d5e26f3d4a59925881ce37d1bdeb33e8682dcc279c9e0819ebec1","67945ae2d6afb392f35c4290babeead903d4e9bc07de0f3b68ca118a3ddd934a","822f079723e738be80c1b41a6c3e9fb9fe10e044f470860c9cf6f60f80128a15","91cc006c3f424ecb241bd183a95a94efbfd8b798599a33a0bf97011037153900","83f42ac660298030039657fba665d1927c984fe4ba1e35ca5fa2b9345c12df0c","3520002e20f205a5e2c7683df52b5c77fe454ada68a85506f659d94f96d1078c"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3122521988 · entry 108e9186e8c5677afa72…
Expected log hash
9fa0d177312c5b0b22ba9dc313f3316134d71d179dc19912df4abe4610de68bf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791343163559","kind":"published-quote","locale":"de","page":"theme:zasta/quality/de","quote":"hat super funktioniert","rating":4,"review_date":"2026-09-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (feb82b7f8aea…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.