Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It was only possible to make the one-time payment on the website”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6ee1677833b2b00a9c46eb2b187b96f521a125ae2024e5e92e20bd9b10b6fa67
Signature (Ed25519, base64)
5Vqn3zqdElYlEhFmWk7WceqpZ6M6WW2vw+0GYHtriDoSVSJyypzkJaJC3tWu/nc6YoeIBi11Mty4DqnBlqoLBA==
Merkle root
c954f278b03f0ddfeb806da3192a945ea74ae5ace31cdf4f5c03d62f9b9c9c85
Merkle path
["6edf6cbb9a7304b5ed259d171ee3380a3e1f9fc6efe7d4c2cd0a853d86262f8b","dc7f261a78c006e66c745dd95d6df5ece69745de4fc234a8db7e9fd933bf18de","4233ff069661400999bc28d37bbe6e859fef142adcfc65b938a01a1b8a2ad6d9","8dd1455241164cf5385198fc24d5e9a01040fd5978aa52150cacea64f0cefda6","dbf75ee17f31f52164d54e285604eb52b30afe7f6a2f7030fd4d45e60517c3e4","3e1c0b74c9aa9baed0b5c209fc7fe9ee56305d7d086defba30d7169c13dec397","e774f4a216b2d1d3d8d1e88a411066a7f927af2e036f0c325cd7f82055ee62e4","09dc8f8843b26e085c8865ae56493b55fb19a91b2af3594d859111fc019771d4","3bf5ef4661927e5b559383ffa3a3ab4ea35b05772b3aa2f2fb491d70b23fb4bc","8724d8e9e0a29f2ac2bc564eba44f5d098a90b6ce30bd24b65c73493709e0da8","a82c740fff8fd3038d24c8390fe1ad627e1d19b6869752177ef3eb138230df4e","5637709eb19349a08b638741b529bd449d3f1896594fe7a1768eb913288cc98c","255ceeb13573d35635d64c45c4d6f041b2c4f80e7930c15c8539b3aeb3b2e482","8f7f72c61d4acc20d4e8b3692630947f966118841c6f9ea656d78c48cb55e364","2d9d4b958999e2b40d6b124a0a8044720e0313c217d237832e6b1171798873d8"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3084008230 · entry 108e9186e8c5677aea31…
Expected log hash
6a8c2df90f09571413991731949dc32a09a60f9a75e1342827498da2cbeccca4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791183579482","kind":"published-quote","locale":"en","page":"theme:taxfix/ordering/en","quote":"It was only possible to make the one-time payment on the website","rating":1,"review_date":"2026-09-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c954f278b03f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.