Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Funktioniert nur selten richtig.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
70a6276fb6ca5822c177937295dd441546ced939bfa6bf656cbf26307a4f3577
Signature (Ed25519, base64)
V2jxdG9txLgjFBetOeYjjRdbHpWG+uzkdl3uzJtqKJzpk75p1XH/aaOn8Ui2kK0YFuPUlLNWegg45uXN8iQ8AQ==
Merkle root
c9e6077a1bda893f1455402f424b1d526c8cf2f47d428b611fd8d7fd8b45f80d
Merkle path
["70a3e6fd49f86f20c17ca93bf725b0e8f8d44558348c08924d8725ebfb97072c","b77839a8229d29e190b9223cf699f59413a7a85cc341d8c9a8cfb350330f6474","3035f0702dbd94205175ba7ecb4b15bd3a1e8698926931c698b04c9343e52024","97e0ea9be2934a670739263288dc3c9bafdb788ecee5a042affe212543e42aa4","2afa13ab3999e698733c096ae936817ae5b7bb39ee58dbd78e9ad3867ed212ee","bede5f6cc6d16cf811ad2a239359c3938e5c3694b0d3ca55a00360f2fc8fb6a5","d942f9f493e1fa5ce05dc1e5d2e5dadd4c1941355021a91e4d6e942836da72de","efd459167773b9c8f3de5ccf03f3a29057eb97e119389d3b7794554b2d650283","9af66b586fd1f2a5e5e3384cd8462a6c45538a3f08bd2f9c9e93aba1535225b9","c802f6af2917a25e8aca859f779ed0414a2377caa44d6c504afc6aa2f8674c35","d8e073e4307cfd9cf077bbcd56fb8b74d55352d94ae529353a8a63946d831d76","7381a3512edd98ae6d02e18d5918e287db2ff90efa1722f91720686ecf442ab5","bfa7908c2bfbb549d3c7e20bd836d5e39d493ece5a642522e6d0a8e850ae14ca","c9db0e8749b6887bb580bf4fdb35a1633fc15dc78bce76027a2c70ea28ea9aa5","5322c97ccb72daa49a07d25ff9fa0bd42fe425058f30f6fb1f272a0b90ad3b60"]
Anchored
2026-10-01
Public log entry
search.sigstore.dev, log index 3029042635 · entry 108e9186e8c5677a4403…
Expected log hash
38d9b7e95b1b3c998a8128983d818774fe7ee047adb6f05ee608495c2d7aa418 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790741815621","kind":"published-quote","locale":"de","page":"brand:atupri","quote":"Funktioniert nur selten richtig.","rating":2,"review_date":"2026-06-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c9e6077a1bda…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.