Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“ich diese aber jederzeit kündigen kann”
Google Play · 2/5 · 2026-01-22

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2542751096

Proof data

Record hash (SHA-256): 86cebed99fe4e38cb0a660bce4aaa7c8cd3c6609d42bdffcb826f6c69ceec746
Signature (Ed25519, base64): iHHxkZYRk2oZQCebff7ADzJGOqmJgMV5qVkm6s8Snh+NxEHmVwLYFjZcomEtH0HT2MP7qZM1EzD5ben1qyBFDw==
Merkle root: cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23
Merkle path: ["86d12d076b06d241bb247345d099f744a9069b85d91e61cd1865d94a9f8318ae","57bdb471cf414c0b9118df724948a891ed4be5150406187eef51960c381780d7","a2e91a1796184053e7959acd55934fe92b0a474f5594a4b4add41656d568929b","3b00cf4c4f0b7613d8eef9265635a0c0fcac7bf21987e97cfd55cf8092832ee2","1f71ba2c6d37b8515382d3ab749198dfbbd741e41ba89c4d757751260aa7a4cb","6f5e800be4219e12f9c3d7cb4b5b22ae333027c583b1edeee116a9c260beba8a","758881822b8de590c235c424d9bc75ae3bfc4420096bc46bf7c6063bb8247826","6ed2cf4f4206d717d27ea7cce8802002540bb017fab6305a2110ad3b513cd58a","b64a7e047e87c3a041bae397a904d7347fd30ab40853ff04e6e1e4cd83c348db","b2779f2369121ac021ed1624ddc6b164e34ee81ddb7c4c2e96ada16d3eb93870","b2278c758d4ca0c9a6ab4670d84af611c53971a47dfc5fe3c957cec9f5486828","04e1c79f3cf2bb347746a74560bae907e178fea03ddfb5ad77c4c13d3ce6779f","58b1aaf4ff68687e7006533ee52afa6414f635ffd828ae73a306f5f050aad891","c7065531c3e7c4c7309e4efe4674330d1f0c5150d728171b8966a352ede62d5a","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…
Expected log hash: 8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787281943761","kind":"published-quote","locale":"de","page":"theme:canva/returns/de","quote":"ich diese aber jederzeit kündigen kann","rating":2,"review_date":"2026-01-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.