Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Für mich ist die App jeden Cent wert!”
Google Play · 5/5 · 2026-07-21

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514297706

Proof data

Record hash (SHA-256): 70c670d58edf3e5c882619db17f8e3b5a3182fc059857ea938d3ba0f020a1f12
Signature (Ed25519, base64): eoiegWZdryU48wm+eSYOpdYQucqVHddt6idqosqcCiR4CV21Vyfsb8wNTKuZGgkX7e7aTgZZFSveOM404pj0CA==
Merkle root: 1dd7fec10002d9304505761bfad9c0f048c94d1d6a0775b6fc4291f712d4106b
Merkle path: ["70c6504321a1f2edd77be878fff1c016fbff7bc1bcec11e603aad800fcc61a19","be9e3aa241783d275488617ab518a03cdc4130a753e3fb910e19e4cd6ff8d7f8","f60704f078ea9ed46e9729ee9996df023f7fbbce028f9f01f6954fa0cd41ae2c","f8aa1bf38f9b09449c090c7c72efe089b89500c0f2da3ba260cad638ca2ee1d0","1eef9ef9e033900a40fe55929801172add5db82f92460243ce4abeb88410e93a","1083de0e14e2b23d2602ab974ef198a3bab4d8504def83729ab7418619821b2d","0ffd9f03c2c079ffe71ea94421bbe607e1f80c2c751659f1758ab2400d3105c3","ab2f30b6de199ac189141c4c2b77c13eea9df5d6ede6ea667c740d93e873beee","6bde1320621d7bb692f33c1cf3c6151510e44c56472e430fa6e99643f574d620","37e5244fbe6be774408d5ddcdbdedb4af5c2de7302349ff59d4712d9f2eca090","77c0128bafbee3d1aedbf84b73b75519a5f01009255b74ad251d3fa3a8d03e94","387150d47bb0c4bfe3e5c0a94c3f02bfd44b2d16e9be4ef7e2284565f7c3de2c","4ae35980c39d5fe55d029f85be00593c03277b5745fae784d4668ab06a3da5e0","446b814589c9564f51a341535d393ad23c1a9958834addb7d5c07c1be092092a","54bbc2d7930ffae8e416e662d825fe408002ca5c9c581c2388ff0eb5a37134ae"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514297706 · entry 108e9186e8c5677ab801…
Expected log hash: 861cb9c1424d2f408888a591a8305206c340f8249f4a4581b32f940ce8815405 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787126020727","kind":"published-quote","locale":"de","page":"theme:threema/price/de","quote":"Für mich ist die App jeden Cent wert!","rating":5,"review_date":"2026-07-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.threema.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1dd7fec10002…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.