Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sehr intelligente Programmierung, ohne Vorwarnung ist die kostenpflichtige App nichts mehr wert…”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
888b548b88520799ba79f817218e1e80378cfda57e0bae588af66ea8faa22c71
Signature (Ed25519, base64)
WwUna8zCdyCG4SQ6HG6dzlMm8IFOtg3IyOpZg/zudG2LzETmGK/k3xLiMRqGtA/qN2tYSJBpvxKfHV81OY7NBg==
Merkle root
8a6ad893af0f0bb6c448016a777af61f3f4935afd82df0db132e64f813535715
Merkle path
["88940602ccb2813fee9a978836018de52831237a44ec574de75e4436b586b644","fc2455638452585a324b7b680e936ec543c61bb333b7f193b859ad1a77f20723","04033b92737010d1294fcf3f753e5b7dd1be3ce66094c1230209d053d977228b","40b0c47383aa0b9564d4410ec5d010e28c74be4642f4fd439ddab1d1bff1210e","d92faf123edf4d09ab8b85fd6ef25a5e5fc12affa866fc8073b2ffeaa0b9f7d1","ef2a0c0db72e87117d4c5afb0b23fbd7caf67c47f6401119931bb88d45038a9a","ee496d1c2c9c619a238a9400366727283da9c285dc48d7bb5bbcec5790543ac8","21fb51c387cfc8b18f13cf88ad35f4b1c62eb5b9cd47ffceafb66916625e38af","2e446bd86caa149eb32dbb97bf8afa117da38ddcf06bd38597e65540d617bb78","afff7fb7fc28c0b0a68aa5efe8b9b13662d8d8ddd65452cf2e95946f1f94da4d","366df5d2e957d22d4c8b21152317925a65b8be8bbed94b8c04fdfae0abf6fc59","73f1a430980a35bacc0025104e62589b7f6711bf08b3ba132110caa28e1df671","5284fa1b0195183d338070f05d29e0d94229e3402263e30318e4f273240fdf18","95de144e054f717eac0f186a52d131e0ff4674147622cce8cff3d2611e7b6e99","8834edd87c11ce9424175f1744f71345038aee1c5b6f350a6f7bc2a49b63e8e9"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515144749 · entry 108e9186e8c5677a63b7…
Expected log hash
b6b79ad662332330e69c4ef135f6fb13ddc70048f846024d496aaa533f7f7fc0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787137589246","kind":"published-quote","locale":"de","page":"theme:threema/billing/de","quote":"Sehr intelligente Programmierung, ohne Vorwarnung ist die kostenpflichtige App nichts mehr wert…","rating":1,"review_date":"2025-05-03","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8a6ad893af0f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.