Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Well worth the one time charge.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
68986aa8f453f0c368efd36ad153120688135ba517519d19d936e3bb702866d3
Signature (Ed25519, base64)
HpoKlVsKTaIsOz3gq6SgI2P/AZApUp1b3v8crGxvOXAbu8Vh4U2+l/B0vI44EHIQU1vNU0+99VDIUBU8SAitBw==
Merkle root
9ca8f1c1ad15a78206ceaec922c537c0b0ac598e12c9c25877f5e0e19de38c6e
Merkle path
["689875cb914702e3251f0f0616c6c74ef0e5b957f31b0c8d44f35bd89e68044f","f9401783e2b1c1ec7f79e9af1c6558eb96144d248c1fe92e011b15e9f3f63905","60dc1f9a79662813f07f5b521173341779741759211360246f1d64c685b75649","5213548f8ceb55a115a9bf7497cfb8587fe2195415f4f375d306ee3487856966","45382c294040c6f311a281acd4b3e4667e1deb28e55f7cbfd88631333b97adcd","8c9c797f41e37189579e640b0fe5c4aa3436d704c3c542ac4f6a55a9478c3cbc","fb4b9c784efcb74dfda518d90d433698ccee75bc53bc5f5c4b3cf6df32b38d7d","788dee361eefc9d1e6e70572297945aaa2ae41d51d0fd2b4fff441312d37f4a0","00431f2bcced25e13dc2cd7625d3436002a56f0831e1f904ece3e8b7502f9b18","51ccd6f0f0b85e1f2698a55bd6971da9fc5a531a40919dc42047a8b8a0288da7","5dabcdb14e83e92f6a4b0a0b6f082dc87d9eb8769967094e0c95e4c11a27f66f","a383dda54097c814975bbe4525893869077a5f762d195960171df04e5dba1c42","969114be98209aceeb13470003a6154b1294d7c8dc772e07d6980600f808e932","bb86c0787e05591c350bbf95c58c2d99f0ba679999db51dee6e8bbec88a42a61","deb69ba818cac6d60ad262ee5febe93ecfd14e4c978778af299f82ef8a69b934"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543154575 · entry 108e9186e8c5677a0eab…
Expected log hash
0099eed9d12aa99aaa44ed875b87ffaf90c46527b61dfd92cdd4db2c148aef65 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787284115102","kind":"published-quote","locale":"en","page":"theme:threema/price/en","quote":"Well worth the one time charge.","rating":5,"review_date":"2025-12-21","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ca8f1c1ad15…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.