Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super fast service”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
90ee87c5dcffbd17c8fe06ef7b64248cf987d0205c793a8833eadf10cf518b83
Signature (Ed25519, base64)
fVKP4BsmdscePl12sNF3tdKRoGuRUywgPNqd6vv3IAEGCu6aLrytixCyBi2D8G4yz14qqU6Bg/yubM0ExBd7Cw==
Merkle root
1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6
Merkle path
["90f1b0651bad2e744cf115df9e01156c4d5acec66645d677e4bcea90085e8325","5329d15156674ad22d64262c098c63bce1a986517990052ed655182f45f68d20","e38398bdea74d53688b60a711a365831f77bb8f83094e3e8c902e1e0773e5597","532dffb81c5bb7af5a776d0898ac47d3c85c24dc4c180121de5e7c9e64082db8","c0d478c9ef5c3ea123d163056ef9bfdcdcc0e8d3ddc57b997256b006f5166c11","6c09fdee93533f6cd88e37f6fb4b8a4c29c18a05ed2246ef32f25848f3c8ba3a","bdd80c6e2f82543a8356b6f925ee11c730c7fc4fb44fc7488e99535a39475106","5df9ee9cfd6357230dac71eb8c71e4e620776d2280e833f625018e8644f083d1","145e063fc3a1f33e8a6aedd15dcdb41fce1868a46e448376faa21cd64204160b","25e977535ce6b2c581136311b8edd68d1f54c2cc1398e947f27870c3a7e29b81","93e36390f53520e55058a2690b1220a754f6a4abd30435fff587c0f37aa909e9","f593a66efe0350d81e794b43c17eb447282c3b809d1de3719c9a68e3f26a9bd9","6c0aaed5e79061d397304ea25612fe2eece0d52aa321f19af2d23e846682458d","f75a88b2a62ebd5b73df1c71402ad7b8bc380b5df523df930ffc21838b31cb00","b39bfa02188a075f3ffabe31b61efbaa34ef7a32306f491e668efcd33d84ef4b"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…
Expected log hash
3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791338675665","kind":"published-quote","locale":"en","page":"theme:taxfix/service/en","quote":"Super fast service","rating":5,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.