Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Processing time is already 5 months.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2991846025

Proof data

Record hash (SHA-256)

6f817a56b2673c38bd150c74aeda05d284fe5a594e1b05e757d284632300edcb

Signature (Ed25519, base64)

nf4qfdhCkvrWqkffQmmTNVnNJYijvKTJCEjhgck5M5oYz0GyPpc5IrHvoue9ek9K7OXGbgZJyi62XMYV+sLLCQ==

Merkle root

d312d00ed6ab2beb6e18f20d8087ad3474eb8b04b26d5ad949e9237bf3ca4c52

Merkle path

["6f82e98e72a5b2227579e090fd4ee131f5e6e9e2903e09275a755190539120c3","25a60524762221322397f5fa48961e492f65d765d5e5def7da4fc27abf9fbbaa","bb37b47e2ed4ee1bf6ecee2b51e7c0b94c214abae5234301a77e10bbfb5e02c6","9e9307cfe56ad0497b9459da8c592785af055b74e846185535c93ade371f8783","72e20a7a10cb73d0d297118d9379403ec97c6bb4ddc054bc51a61f8cab9357d6","5c2b3adb33f6039a0bf2d213f706d97ea7b220cb61b5b2b4e35a31f1c4a209c5","2e95e27b85fb3db46daec64c704d83d86cc5c3e0970fc81bfda34aa3e73c9483","db4fa3224572d6898c46c29cda10329858ee136d201944063e82ed1e4db7f536","0647340334c609497ee1ffff839da2cf1cd9ec6388d156dbc1667d0b75394838","e38184d618185851ac51817b26b5f3f472f5f2e9ba4b831d4f8e8b5e14d60dbf","e22870ff40c337c3ead2903bb564913004f1e9775d204669447133cb20565790","39c354258bc96a643f491dfc400e34c367a90b518ddd054968eb36792c4eb66e","2677d1cff114508638aaf8e9c4730006ee8b778ccb52fd7ae32f6136ea74705c","1b52c506e73c97f5d2cc9d574137c52cb370bf5407bebe9b32056b133838b1ec","2fe1a36eecbe6e65e0243c1a81f5f430e558c99de7c492361bda367e122fe03b"]

Anchored

2026-09-29

Public log entry

search.sigstore.dev, log index 2991846025 · entry 108e9186e8c5677a5f08…

Expected log hash

321e41cd200068478c5cf6f353f00dbd75153d3d8a640e241b1a6e8e4f8ac2ea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790574513694","kind":"published-quote","locale":"en","page":"theme:taxfix/delivery/en","quote":"Processing time is already 5 months.","rating":1,"review_date":"2026-06-24","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d312d00ed6ab…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.