Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ohne in-App-Käufe und sehr einfach zu bedienen”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6f26c20d96ec3d1950f2c4571126f5fa7fbc7ed9e4f1f2a99499400cc0335b3d
Signature (Ed25519, base64)
aG0qtTk7cWjOJv+Xw7vUNmAIt4juf8yOCsyMwDOE+PQAulsTMiZktvHyoHt7iOBPuvCQhOTWw/hA9ymElV88Cw==
Merkle root
681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path
["6f2a4b7298b7eb4d1dc3cd6354d5c68f5595908f914b255a6f95ab64c905ade8","e3975b614ba89c9c8a83c87eff7b42ddf24b766caae698afadf8203207741750","afe06c5ecec61ead0940833bebd7c428062fbf0309d488bc23c275a32f8e3449","ae55572739e42bd1e9a8436346824b161b68649862ada41c6652e45973a3e126","6ba2ada87aefb631bbee46ec0ead8f250243a0676930e8e56f0a6bb367fb2fd8","021742b51ebe3c01fc9b98626e968b580f4a3418ab28038a9417fae644ca9249","f401e40ce6bd1f6985e4b01d71af0cf36e2d8ccfd56a4fb1e232ee09e6c1727e","eba565cdff26c56dcff16836259aef6c3a6f2268fc8cb9b528fa529c3eaaba15","da8805a646638f396a9b0b0a385bb02bb93f450c4a9c5e17a49d6a1c019c7cbc","a950c953e02cfbe0bc344082f28a50f7d8ed500d3aafc1d104a81de4fd6c5e3d","b6ef43d38957ed5969e5af54c825e6bfed51efb9dd844dd7f23da6760d601ca8","f44be1811ff0bb195f5fdef3c493187d1dd9ac5bcbedba4371f021a93bcc8365","b8686ad1f3c76af9372c49f04594bb5fe4d826cc036a375eba0c663f521c54c8","ac4c7c6db85c9df99401fda1075a3bd42dea9188ac58b0911e04bce8752d56c6","78eca2193b177c5ad7546ff5d365dd6cb79efa278dddff5151740888f319c0e5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash
8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787282728402","kind":"published-quote","locale":"de","page":"theme:threema/price/de","quote":"Ohne in-App-Käufe und sehr einfach zu bedienen","rating":5,"review_date":"2026-07-15","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.