Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Waste Of Money.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542342116

Proof data

Record hash (SHA-256)

61e3f16c685790c172d9f3b392b4e2f95431c792587507ed507b10314814ad19

Signature (Ed25519, base64)

DyvhBZ5o6CGj0LGe3Xty2MY487wj+Nl372+gPO3U388P4TJvN06b1z5fg4iSSw2sg2KowvrYjEQnp4XzUHN0DQ==

Merkle root

13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725

Merkle path

["61e0d6857697eff47a64d421fd96b065ac9cc2101b6182031b1fb3323f3858d7","2236d3cdf84ab4b4f0b537b057d12783d70688a820f0e25ea2407100455a078b","e0e61be967a9ad24e2922f49537b6f3f4dc272d6007fd327f86fb6c67ee076ad","5fba8174be3368bc19e8ff8f4cfedbdd7d58e5bb5726044397a31e1d0102d06c","76f50b7b12be693e80e8d8b176c0219a28e8b49c48ff407c83b64857180ef663","8b9c13117206fec4a1e3ba8889c7f3a83f65300a56f3610351683706d9900519","96dd86f67b8725f911514809f2be747f28acdf2e6e4cb8516131728a39763be3","5cbd4712fc3b2e642222bee9b75b6814bb66784449dbf3470734bbc7eeefb71a","17d9e45fc58a0493a23143ce0a356ce2322d0b8a8015c5c9af258df00c13264d","1d8da3c16cc93fad7271f3b2275ad1d7d1ccad14e7333d13fb308fa2d98afa9b","16e8c716c2df7a8f36e0abd3878423f923933de0fd9678bc65857cdcdb598bbb","c7dbdd8ceaaa0092aab48b3ece84c27359ea41a0e23f84e21e80227c488d2d24","def79475a5b87d823ffaa82cf9c802a7968dccfbc8519501ee364e037c0e7931","9c23963b54ac666752e013737b81ec6a31e3529ac67f9360ca3657ae9a4b72b0","bc9aae2a90fd8d311435fb1459ac7953f7f2923aa1b697bb0b40101796e3503b"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…

Expected log hash

44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787279544668","kind":"published-quote","locale":"en","page":"theme:threema/price/en","quote":"Waste Of Money.","rating":1,"review_date":"2025-08-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.threema.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.