Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Funktioniert perfekt”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
715c7cdfd83954cc86940e0f93000b6b6c7b9605df01d69afd9e9ffcd6ebdb3e
Signature (Ed25519, base64)
2L/museYLgxhxKb+OTlA6Yz2SibVxhf5KNC7pDRAo86nI6E12ImBKAzHdJXU8jdqmSR0HKZj8V+JWLUFjbTQCg==
Merkle root
9ddf6b9053b6e5e7a2f15ee7f3bfc8dfb72c48a1917ae5b7e553033e3ded6523
Merkle path
["715e3f57f7aebb8fb646e6d90cb0a554a7f4f55742cc3331ee04176fd29d4515","d4ea0a88b75dd39006f2c355885621474ea7b3c73033ca87cd3a5bbc38b56abf","017978a3986d334af0a9bc092398df63a17195f592a847034b1a0c0a53390200","98eb1f3fba406aabd5e244f0d4b4b480ea75a3eb668990b4d32f85231ffd204f","c0686f4ba9fdda9860c3078c12b40f8e4a02dfc6d7e7a93c68706eeab728fa9f","0750716d4caf269757670dfa2086328221b9c32de957adcf1dab49150476626b","9954d00fca43e0f4e72841572a139fe47f8a252ff20333fb15f3e500f3912525","47de3d6e2960b52f9a86e8da7d20c2242754dfa3ae161ec65aee4e3bc29b1bdb","9308be82d0ed43be31cd4b95dfde155d52b1a8b39350ee2fc8b31dea950916f0","a9bc2a93d5c843f01b1a2d9907a72f736d553ec1c744770a12e73bd5ecca2093","bcd97fed11e40acabc9094d6e48a59bb94f71d25811319fbeb8905370f330b8b","2b6dee3749b82f13b3b8a641bbe3341e0b73743d28edcad040b0254dae05ac25","a21260a3b3feca1d6975bcdc8cefc8114d0a842f3a7e63f8b9f1b1daec35bd2a","ea40ae0189ccbe6f115902554a87d5a76ecff9d4f22c2848cf6df598f3744e11","50c4eca268fbb41f8c6bc36d8a5d1b6cc09733d96f0fb33e6cb584096c56f695"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514967984 · entry 108e9186e8c5677a902c…
Expected log hash
be0cb34bbab326d10b25013c37c9294b14554a6c6e9fac3dc68c06dc2c3c60e7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787135269737","kind":"published-quote","locale":"de","page":"theme:threema/durability/de","quote":"Funktioniert perfekt","rating":5,"review_date":"2026-07-25","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1105927783?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ddf6b9053b6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.