Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nicht installieren ⚠️”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6c875bbb19e5ed64ea80f96ba8ef55a696af35979d4860bdc8ad3654a78d8f02
Signature (Ed25519, base64)
3dML/TfQ34LCgRa4uuc8RDgmMfCkAnbWxVKdVHRnkpR1YOY1b+3ICAPBG4Rj1dwKy2FF96hIAZs2lty1WoV1CQ==
Merkle root
c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3
Merkle path
["6c890aa705a2b285ec477a961e09a0ef5134a5984439920dc612d53aa389d9bb","6f36a1e4b7a7ecf3bb961bc9e35af7daf2759eb683906e7c0f621808bb56fa44","32fb2fec8b65d73c0f7eb4b8b462cca2e05da593671f7ec061b835acfaa61df7","228aff64d1b6bfea0a3eeb0fa050d2748398ea0444baf427300ee7f8b39986a8","2ddc2005246c30fd781788115a13eac9ae7124ea20e97407ddc6c8b1cf1fd2a2","c3bdb25120af53f87d376a493222341a231136bf7b4b80636f7f1db8ed3bb4bd","4736dabbab5961fff2c3c8f4b7d2842fc7b404f936fdd7973d5eef2e6961bb9f","d78de596e8556fef580d0619b36cda58204ebb05ee1c172a33330cd5662407ea","8a076403ead3c33df7ddd968bca3c3253975373c0d73e7a54273dca2c440f10c","ec059c3a3593b0ce19712f70d1b5358ff3c271015cd9682ae154758f51f7e53b","f0b56a59a44ea7850b1490b75351e04ce1959909cc8f1e7ff5f35b49e1d3a748","e6975bdb680ca61589e2adaf9fb8c5751c7c5d7faae2f5aebb9acd92eb2c43c0","fe401194a89b1a35c403a838c20d5686b9ad58181ce3567976f2ac8fa6a2f5af","4cd1a38cdfbd42b170e4929f839c7168ae4c49380e77ff0b1b146fb7e3e194bf","8308334b0715cdc2685afc133c95aa85c9b86c8dab9c8659092b74cf2783feda"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…
Expected log hash
5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791348381030","kind":"published-quote","locale":"de","page":"theme:everand/communication/de","quote":"Nicht installieren ⚠️","rating":1,"review_date":"2026-06-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.