Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich nutze sie schon seit Jahren.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
8d56871ee5a8cf7c6c4689e25c41d9d221f01818a10bb63ffe925a2bbf4b6ef3
Signature (Ed25519, base64)
y/KHxe07Kay19jxh37EHwLM4CfgEqaeFR0aSTItx2+Nb70682qKw0otgdRRScB8FrJC+T1sg26epspXtdTQFAg==
Merkle root
e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465
Merkle path
["8d59a75b718ce91d5add6428f8fb81c8cb815674ebf70324f7e96fe6243609d0","f1e20dbbbfb9b6aecad14dc9fe1d368d4849b0fd255c441ce57922831b9b8526","06962e7bfbbaa9be6a203f180d75837157d827c651fbc6ded2bdaf52de1c7f90","3365accc1708ff7ff69def16608bf8f1118fc7533572cf37b959bdf1d76fac52","9854f46fb2066d900f4fc9c2fc32f150222f9090d7e9ba9082f5d33150e8d931","2161792a0af5662cf6cb34802c8802654b4d077a2a19d35cd47ed0d75e2f4216","e91b2e0812e3742f433b703653a3c5a75f27b16395b31a53b2531ff4bed4e41f","2aa25d263077f73c719ff01c727be68ae8667bc064b3b89d9bdd89d5a336acba","8f19e5ecce67cbc38924cf007902708552571ce81829998fd79fab14a7090f53","7142ac2136c1dc7c0090e0832c5534aa0ef7d892a7901c83dea63e885455886a","f69125d404a716ab6ef13c43ab40f471f0da2a433827c925f52a74d1615e1905","db7172ce14e794d11e5f11fe11ac06253cffac3c662e17e925db59b4efa0b12f","7f1d0c445bb13ae8c90e977abd9f4b017f1736dd8a0b6837e8297de8e292d186","f1950e4af29dd22cc94bc58ead6e376c41b02edc9ab0ebaff7fa6fa0f9bd3732","11a62e67a9d98d919358ca5b8855f911ccdc865f14b203213de31adc67657443"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…
Expected log hash
d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787140356347","kind":"published-quote","locale":"de","page":"brand:sumup","quote":"Ich nutze sie schon seit Jahren.","rating":5,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.kaching.merchant","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.