Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Geht nicht ohne Bezahlung”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
63eab234e4fc253d6365be069ba9c22b4afc0b5c9bd1f530a7de0306d7dfafd6
Signature (Ed25519, base64)
t1wepgrkp62l2IpsXn35l9+WoLJSmN3GY7p0+PW6aQuHqQO1Gw/Qu56W2Lg4aO0N43waFkmC8KWYuBbo7o6gDQ==
Merkle root
fc0474f2ab9253f8c52a81a0b2f1ae382f5f022f9b54f4e3fe06eadaf19fcf31
Merkle path
["63fd67820a574d3ac276d728fd7888b74e4ed9f6c13b545fdbac97633fead3d3","2e7bfb0db3489fb75bcc752c316002224164bc8973a82ae1c699b068fa8f265c","81e73178234235f210fc5289eb536b3aa4e4d9e738cac5ee3c0a18d929df2b6b","8f913695da11bfff8ff8ae5dd738d5aeb2af02f27bf5538ed862eb8ebacf29a0","fab31eae71f8b071431df8bf67665831e958d85f7681aa99145863ab04c0319c","916393a0cbd4e398563e505b418c323e5d33d57eed669fc06bf21a8ee73ee734","3326e776fd290f745254cac92a1bb5698643b3d0470911f5d45fd4df47d55cc4","b228c872246248ee3af29169870bf17606dd4b60a4b74aebebfe718818e0da0e","56c880cc66c0fb600bec00964496eb05543b18249bb33432128372ed001e552b","693a49adcce18366fca5e2778f518f21460ab48b987c269f2a7b18b4ba68ce25","f82b62ed393df6e75c6eaeebf74f077be510cc4b9badc5efbbd62a5c0df8d751","4b473519aec772c9e255916dd393be76b9639055882afbfb7981bc3d09a6ab5e","45c0c0e230e3fef68f32d677676bfb42e35f39fb2908713c2469479af7a56696","5e3e14a1ecafa84280522a5086c1c4eb7da1d2c5613bfc63f3fbb10c0768d98b","df2c1289894581f6e22c526afc719be15b70c61ef4fbef0978dff78cc8fc6054"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2544092674 · entry 108e9186e8c5677a1b30…
Expected log hash
e3ca1014bd6a1a766a29da72cd2b9f7f9c6c416fe6af720fafa94eca555dc171 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787289954326","kind":"published-quote","locale":"de","page":"theme:acrobat/ordering/de","quote":"Geht nicht ohne Bezahlung","rating":4,"review_date":"2026-01-24","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fc0474f2ab92…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.