Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I am still paying although I am not using it for months”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
870f8c86f4758607963580f993f1c0976aac803da71ff7c778b5d18c8e3c5ddf
Signature (Ed25519, base64)
G8U7FRTJGGNjWiuzwSo7VmXsgJQHvcnfvUx+SYmHLlZVmziTw7mLVSIJOiajbJSU79F9oUlwrSLPBbGXKPtfAA==
Merkle root
c35385e3159410853b606ace3c93abcb561dc35874bbfae2272c5b0050f06a48
Merkle path
["8710c557e217f7081445c91a1c85ab153aca553f2e99def4a0a347bd462b25b8","bccb05950ca9035cb598fe43e1aca2b0707034f7b0ec79bca3750c3c02bc94de","54dd4e626b788df46f737237caa80a3da986600ce0990f0b1134e1333258f93e","3666f55e3480f93e92b65af4ac29ed34ea6c8fec476526b31387a77841f9ad66","e9e23a83d8d43b5469bb0127201271c3b7b724aba2657ce91b8a1e3227889136","84d3765bd7750569e552ae6ff9da911932092d6b877a14c72a4d4bfa003bddd0","ce602f8df03f01093e8cf7ba77b7e8d90f94d6d08f83e09406c27ebef64245eb","4a2c71c6866b7ae703d6b73248d99b71d13b25133be6b7e96b7cb91f9dc4d03d","c1b42c35b5bba75e2efdcc1301b44bad4e460b713ad8d16e5729ef69d3c6bbc4","f989d2efcff77f061c5f9886278375aa767f21184314c6177e6776289a642b46","890834415c06d2576b8c7769416fe2a52276e74e62d0b2c93ab2cb42afe57496","be75663af2e5faf4ea68e99df896407b886570b083c6803a8a8492ba26c88aa2","6cc2706a4ceb9b9114520cebef77f34a5bff54a2bf14e315fba81a7635eddb21","eb865981e8703d40e97f7a1d500cef5e7bd341c0e720b4ca75d23312d5aa5f63","19399f0af13a2147dd8ceb83692caff2214adce3d49571e366dcfb3633df2667"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514083622 · entry 108e9186e8c5677a81ef…
Expected log hash
eb47f42546fcc705387579993679cd6250c0b995d01bbd10805cb4c8d66efe2c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787123762743","kind":"published-quote","locale":"de","page":"theme:threema/billing/de","quote":"I am still paying although I am not using it for months","rating":1,"review_date":"2025-08-26","source":"Apple App Store","source_url":"https://apps.apple.com/tr/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c35385e31594…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.