Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Zweimal habe ich 6,49€ für eine neue Installation gezahlt”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
8acfa862a9aff54e7ebc272d5dc645f70ed60ef3a0cf612c872df3101217e688
Signature (Ed25519, base64)
ljAE0AvAExw9MrEhewJQ5iIsgvhp63/iFf4xAvFbTFz8DwOYjzIUzlJyaOeFd4V1qL5uOWJdaF7VhDQenFrEDw==
Merkle root
62390602d5b1801b2c96dd61074fd5810278db65461e368ee19c9bb147d249dc
Merkle path
["8acc271989d928e76629569badca49bf01c32d7e8c2bd07b27ac45e953688948","a41ee10fe654ed0ca7832a1d87cc3405074502b926c9989d21f8331b04ccd9c9","9120ecc2b4227fe3b34d633381b5c6a733846eddc3c1e4888976fa303abb6ba7","7c947eaab2ec73c31bb8b5c013be2d6b97c8cfe41936ba90089b0a848e253ea0","c4a765139bb46dad69ffa0a71c3f0fc86feefa86015d203fd84dd3812c8bc435","e7fd52bf4679fb242e8e16abe5984e2d6d68470dba68ea7cc2d5a7ec80c84293","b7575c89fc39381c0903ec75c649e8309f9d8abac5e9b41d0c1e9540e4a89a86","0594819b300e04ae96851c0b96cc100af8021f4f38535b13d8461f9b884b2f1d","c92e244fba618aff79d602902a515717dc1a3be31ad85e9166fed4b5c6afe1e5","dae35eed43b02348a29fd9e63c349b42f2d5d0ba953179271230bca6cc909a8a","0f036e9fd2837064075d3047234d68742911518ff92c6117e3a2837792a01628","28590a7fef914fc3408450c099771c57ef8b12c59859a446ce0372c80428ed90","a5b0f88103dec63c80bc1707eab835572838fff5f43aed265827460436ca21e9","baf7c3a9a57269bbb0661385ae981f5f3219ae8da84a7502572e283df3bc7435","9092fce07a46a5708f071a70ba5ae2d3ebe27de5e813ea1756180e7747d7c5d9"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515033577 · entry 108e9186e8c5677aaea6…
Expected log hash
458ac564101d02a2c8a5f98465ce4e920300682f0855e017234ab870c48a16cf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787135948936","kind":"published-quote","locale":"de","page":"theme:threema/billing/de","quote":"Zweimal habe ich 6,49€ für eine neue Installation gezahlt","rating":1,"review_date":"2026-03-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.threema.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (62390602d5b1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.