Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Leider kann ich mein iPhone Threema , das ich schon sehr lange benutze, NICHT auf mein iPad übertragen”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
62e719e606887777efb65bd95c55cfff65e5e6635ef34ff0ed8605f32c40cc54
Signature (Ed25519, base64)
VMjN/YiHZvRJV4idz9OwfE5v2wUSLGBMXllBf2hvW2CYupF2Od2mqkDyCkJX0MMg8erKT8PFwUzSVyFfJcWUCw==
Merkle root
681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path
["62e955e2fffe3c0af5fb144fdcfcbd016ca1e923067de1ae2c4ff1ac9c9fadca","dc0899080cbc26744fa4248e45699492eeeefe939f670e728df00ded13f2f0dc","7614189c5bec0f51a113238711c49420b3f60c6e62a2587f886ba7ed3a1b5ec5","4ae0a826f2356bca844a2429b862729d6b30eecb59d2900e489cfeb7c4ecec0d","e05125aaaff902fac0114afda0295f256b769266c3cb9f920b7d43ad6863a541","2c6dbf778626a4ba6e38ecffc7d1421d4fb35c814833a370003b3ca60cb50502","92d43ffba9747cd4691cdcea5e93ab9d125fb5655443120a48e4ba9272534353","43a07ff7e74f65017488e4d786ec6cb4ed73ba57ebc5e717d727b04cf6a07d95","b2a895e914e6d74d661b2ecc4ec2a2e9d215db48566d5913a8376babab58b2c8","d21a8577cddb450b41d5b2d6729858848a6922fb114c328a3a953adbd1756932","032be7307d5db4b79cb5329f9b3de2ef3a6e3543bd6b235f36cca22303365eae","f44be1811ff0bb195f5fdef3c493187d1dd9ac5bcbedba4371f021a93bcc8365","b8686ad1f3c76af9372c49f04594bb5fe4d826cc036a375eba0c663f521c54c8","ac4c7c6db85c9df99401fda1075a3bd42dea9188ac58b0911e04bce8752d56c6","78eca2193b177c5ad7546ff5d365dd6cb79efa278dddff5151740888f319c0e5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash
8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787282728402","kind":"published-quote","locale":"de","page":"theme:threema/fit/de","quote":"Leider kann ich mein iPhone Threema , das ich schon sehr lange benutze, NICHT auf mein iPad übertragen","rating":4,"review_date":"2025-05-06","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.