Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Die App ist einfach schlecht.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
95de8fcc8020078210ba4ea201d0ce7f615c8c3470858f54832dd9b14617d68d
Signature (Ed25519, base64)
KrmMLFgZMpjqKlprVdj4604D/07BQ/h9qhF5dWPlmhYbHBVUyiwR0rqw3ewdSg3PhXVZRkv+qIqez1bQCsMwBQ==
Merkle root
c9e6077a1bda893f1455402f424b1d526c8cf2f47d428b611fd8d7fd8b45f80d
Merkle path
["95dcfcdba3f8ec992e41cc08d57320d6d47dd41e6c9d6d9638b08ebca5de79d3","ada0f18a5838b704a6b70daffb6390f6ca6efb58bb7ca7808760f81e56228f12","c50beb82989eab151e9fd89db78cd34ffb7691d41f99182d15932005937fc656","0e5517fb6e60a3f96dd136ba8c5488374ef15036fe335e2f3eb4e88fa8e9e4c8","e3be4d75a8a7edcd3312054a47f38ab4f2956fc383430320ba00d54517504f4a","7f94ccf5d7fb875914e3f3057b7dc0cce10d0a3aa672d4f2b536d253d4341614","d51f319b952510c0adda547852ad94e998487f208f0d1c789b8f3d9129243ede","511ed2c8cb0b0c61687d424d912f1e66f25f1df70c6b665d146d86b02d7ce162","76cd913952d99890c82b6aabf0c9e9c720b2289a584eddcb67c0466b4af72e62","3ee38b69eb982fac5a92ee89c2849edd6a1698ff9aa2ac5c594ec86a6b890d85","e3a2c33b9e947032b36a21d9f66d94a741072d32607fcd104d5367e7470deacc","61a7bbd58684db7aeeae7eefa5216c69a33eb017625b68c3e139cda5fa8fd78f","4795d13d6bf5f17d5468f644d3fe22d721bc2ec6d3fb73a43613e87939855d23","1616c16ecfa49e18821de7767bf3fa1e1a6fd3ec2fa090ad2f10f8770da252c6","e91b4f1cf428f19a0932cddea6de9c1c364010417f9e244d933b133a023a7aa3"]
Anchored
2026-10-01
Public log entry
search.sigstore.dev, log index 3029042635 · entry 108e9186e8c5677a4403…
Expected log hash
38d9b7e95b1b3c998a8128983d818774fe7ee047adb6f05ee608495c2d7aa418 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790741815621","kind":"published-quote","locale":"de","page":"theme:taxfix/ordering/de","quote":"Die App ist einfach schlecht.","rating":1,"review_date":"2026-08-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c9e6077a1bda…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.