Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“es bleibt bei der Einmalzahlung und kann die App sofort wieder runter laden.”
Google Play · 5/5 · 2026-01-15

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2515095234

Proof data

Record hash (SHA-256): 729a76d4ffd0d7111bd9395b693e49ff943b1872fbfbeb27b37f48ed2c7b5e66
Signature (Ed25519, base64): +k40j9lA7A9ep6Knw46ArlA5HImz05ZyrOKpsn+IDkUlId8jMaDifRkmgeQNlMPCrxzKqKScgECkqIy3ZjdlDQ==
Merkle root: d9909e7ff193b610d96d9930fa8111baf2fdaa08b732478b03ded2b9e1e52914
Merkle path: ["72989dbd1b3b6bc8803309dde5e9a150f86b9f1949f6b796c2607efb61d15eea","c8e29a652964ca9f3ea3857ac98e87edd0ca4b6b85d4b6c4060e67b2083ea9e5","ac8a5e9c7722e9d231c1fbe25f7b398bc1d3e6d4258f0cae02b516755b2634de","de0af94e6fa40fb70c4219ffa46ed9c8b3f770bfeb6efd8dfc2f9efb821c5f02","3ba19a4898503cd79fc82ee15e3e92c4272379ce98a20d28a347db3b30d145f1","e383e929f80089a15750c916bff2399bf695e67c14dd322e16f7833e9f9cfa87","d01a8cf170fb310bc21477ca7e17c191cb5ce079601d0c5c9834a27fbc5f36a5","ccfeaa5eec66c222d7479abda26c960bb4898a7a18ac476e626efe385aca7b2f","fd2d4b1deb92ed1de45f36764b65c3e293e7f0845184382222fbb6345cf0a899","1d2dd5ae57b9f0d1e81af3ce8cf371ea6da321bb4c2042006a264418a9c3fcfb","ab71616747f3f313b6208458f071ffa1432ddf6f9ada13694a8ad71da3536162","9674e4ecef5e17216d02256f30d1a12e9bd64c829be82392db2ad16d9e944e26","fe512df538f31c12d9084e7935c17aa095161d0611453d225ad85718977c3370","fbe51c186e2797045566a65d4e8ac09d80335ed84733c00aea2f32527a4eb0c2","2aa33c224957c89d7d414cc43142ae7c4368efde4f1a1b6051ee910ab17bf997"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2515095234 · entry 108e9186e8c5677a299c…
Expected log hash: 6f0abb2e15f57da153d99eb9fe756fd2540bcac51fcddbf7ac60c4be3cfb5f7f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787136684512","kind":"published-quote","locale":"de","page":"theme:threema/returns/de","quote":"es bleibt bei der Einmalzahlung und kann die App sofort wieder runter laden.","rating":5,"review_date":"2026-01-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.threema.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d9909e7ff193…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.