Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Login not possible.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3240231023

Proof data

Record hash (SHA-256)

7b197feae1a2d00d313e258adebaafd814d41f50ddda37df7758d9a58cc803df

Signature (Ed25519, base64)

yMbxqXY2QAz00iP27UZqKm4oa7nk81q5lIqd1v/Zkn2A8IWH8Z9oFkGJ9p+Zyd1ZaFuwrygv5hNLFYYPoodtCQ==

Merkle root

888a38c73939ec95e6f226dbfb3637325026fcafc5a795aa4e227b811d6b2c84

Merkle path

["7b167083dd484c53343f054b37f93374494cc6ad9c2c5b2db279097bd79d4919","61372b8b0feac198d85d3cb10ae85f6b2e263c6e04fc58cef1edd2715a1fbe76","dd2e9d9a5e60aef87bc377a6d5a64eb576aac9394ca1e4fb37f31651fef92d47","67643f2dd7efbd8ec2224d1fcab6eabe514f5ff9eadd8626427005a1defcecc1","8148dd0c01aa16c135b52a4a10d20fe08c2858df1d1a6b2b7603847d48f7460a","f12880561e938ac28e2c4ff80eedc1a8bbe68d7d75896eb22d0d9ab3fb7b56a6","966854a213bdec5696d91db5831abd59ad9c790b3273eff0dee49b4b71b8df59","34a5e79a95f413b62c4a3519ec8a09b394cbb9c45f25b44ef57163ce0c13fb11","1e3aabacdb531ace32a63a369d32a3883f851cad986e3418890450d4794091d1","d210491414dd0b209cb7b51b58acc8e8d1c25842c24bae0c121f5b940c347642","08c7b3a53ef06a11106dd9b8e585ccde24adfa43e780e243fc2da1f635e54d68","7679ef7762a2f2264918aefaef827758b32914a11d7fe90e91135a7bccfb5f67","e914982b1091e825c1b1eed272fcd3bb043d32154d866d3ead686c2cb77bc78a","f46648ad2fd9f2769b9fc0ba1c434d2040de67cbd8b7a61df7b7575cd5a9206a"]

Anchored

2026-10-13

Public log entry

search.sigstore.dev, log index 3240231023 · entry 108e9186e8c5677ac0ab…

Expected log hash

bc440cd3136178aee800fe49b9cf2e319542a645c9abbb8553c6ae1e354ce201 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791860805798","kind":"published-quote","locale":"en","page":"brand:atupri","quote":"Login not possible.","rating":1,"review_date":"2026-07-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (888a38c73939…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.