Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“App nervt nur noch”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
854be1612c25512434e05aad1e23d7744a215c34dbe91fa79f9a3006093fe6ac
Signature (Ed25519, base64)
BEeI3GcXPbAOsnSIf4aD97dmsFjb4B4xnhfmpkJ/LQk2DuGYDrFCXMdSY2O/JdIePo0jnYBAwb2EoHT07ypCBw==
Merkle root
3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2
Merkle path
["85499c5de1b7e315c8bbd204020262c8197b05b27080eac88da53afbf8484876","4342ba18ae3aa8f76928d8c94fd834653d729f668830cb92098c2a3e296650e8","eb106871e0f965303e0ab216232be204ce1df94b1e99c3ebd8f9296dc6e314ca","28bd97c1db6e8a5613e9732d00a3463f1af3b127c403706ca153cb1ab3afddaa","3e93923fb637464ea246399367a86d4b5cf3ff82b25758fa79ac37da2b22e10b","24efa021ca65f129fad63cb41ae4cbb57d7bf24a4074caed2b78fd315bed0b47","a1cc7093142f2478839437056ba42bc379c86e488e8ac0023f9d3a825a1a59ff","d469f49c5bf5e6d0eca07b926bdcdef46a7cb2fd1a79174e26cc56323a7c2010","6cdd379fee6511ef8c0be8511a3883bc8afe0e2769db7f857bb8f2ad9bf44bd4","85a90d7bb5071351fd799ed5e08453fd0a27f8e1b02e91a1bbdbd4efb4d3a404","3133f2277a31c1a0df798b867bb6617d2ae959fc76e1c7043f4ce87169bd1ada","8e3971d1aa636237e3ac9ed5c83c997615dc86b36532dbdb2a2bc4abba723db8","f012a8a26dfa958fe562e54b8cec123a4f52269d633080fe9e680be84eb62329","2f00626bc88d01c042a52bec5a9d951d8fcf3187df280beda8f094e8085a220b","6099970369039e9ea9943621e6c4ddbe6cf64be652afb6debc70debb01455286"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…
Expected log hash
d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787131980797","kind":"published-quote","locale":"de","page":"theme:threema/billing/de","quote":"App nervt nur noch","rating":1,"review_date":"2025-09-20","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.