Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Leider oft Serverausfälle”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
66fd7ee19f53d7273bce4d0a577a32445d925621517a501f7464ffea637afe4e
Signature (Ed25519, base64)
H8WSi4/9J+CDorOP602tthrI+6D+d/UR18XHi+I56y/faVGQI8opmfubp1l15Wn3Mr9Koi6nM2TFCYhN5ZCFDw==
Merkle root
13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725
Merkle path
["66fb431242f461b120082fceec5de3bf201e88fe908341d381ad0e3692ba5cc9","215610d82c0d927bea2534504955cba62247ef0c97a936896295c88f4090a441","514f58685ae09a698bdc87d92fcec66a25a5b6d261d7963b31747db855b7ba20","bc5dcdc948d4732a6b5c4addec0dc42b7ca2054f1e615fc825710fd564a62eb6","07ecebae05746c0d72803e5266a07ce1526fdf0bd795b35c66d68c107943ee02","eced3750ae799f0baf1bb8f1435455fa94c2ab0a2c63d46e0cefba26b43a8af1","955b7c525bdacabaedc070e00ee1bb27cf4621752cb204ac20f4e90b8a7172eb","177943960b01835ed3008196922af904982d51f81c3d7b52c6fc094fb2445997","9bfee276a15547aed503ce6523744bff41cf0d530f1e16b38a0c253eb22c1ee0","2c9bdca83d45b5d2dfe9aa295f8f5ab6956f32a98bbbfb891782ffe1c0cbb1a8","4d9d045b34f5b7672bc513284ef1e8c359d4682a872efe9a6e6830ee2c7ff7ed","2e4cc4cc9f254585d592ce310b06ef87cd96eee21f75a167ff015e1181264220","a85948d94666cb760325015d876c34467e4e9a308fd736b88b45334d957c084f","8794a267e94c305c4d11faa8a55bb3d3523fb52e75ea5ecdc366a6e906d9f7ca","bc9aae2a90fd8d311435fb1459ac7953f7f2923aa1b697bb0b40101796e3503b"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…
Expected log hash
44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787279544668","kind":"published-quote","locale":"de","page":"theme:sunrise/quality/de","quote":"Leider oft Serverausfälle","rating":1,"review_date":"2026-06-16","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1292688012?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.