Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Steuererklärung leicht gemacht”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
9768597d70e8b5eabf648c268b55c24b127c66f1f37ab67012a53d88394d108d
Signature (Ed25519, base64)
G05vF7uzXRUCdeTwME2gqE5MIDx9VYW2jS7PS50d2LXyQ2+BHwhmdknXsmvcUjQAdTslk+CvWUJWfxjkCqwVDg==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["976b469403998d4bdf3d60c29c0e19a7b3d2b6ce5fdcd196fe2a7a4556d73ced","74d104e2165e00975f8b01904f22ec341ddc3784f0765e75d1fe439c89d31501","48b167778db310c71a99960c9719b4c7dec3b5a4e3e40e0cbf0fe7fa580bcb22","977c7c8813f1b1afb2dc3b004b2b320a9ee856572df0a4e46909ae41fad68f6e","c2ef71ccc2d7a95ecccca17794517add25a98c3c77e0e5d1a1b349d3b38188c3","e81cc0a90d164e5d40c8a22ac178b33e7fcc20b6b39321ba1ac08ee08fb3e507","58783ed90300ada76f8ad328e99b859e760c2e5a63b3129ed38914d45365339d","2e1a4fa652a310aa7d2e96739c9f7b8c93bee8f07b8350b97f15a164c1fa5340","7595d1f2bdd7b51105ca89a432c984004c9e193076b0ccc558c11a32c7f22564","7c7d4ce450616eb4be8dc3a683ac8b24fb0ea196d46a634d6729bfc1eb7caf59","5ca7a67b59b23f5b0f23941b60562aea898186f5720ee48107e33ce7ebd3e7e7","a0381a26375c2e8599a6f8210eaac8a5d95699159c05c2a71dd8738e6acf0d69","47bcf17e9d39d99398d6717a5a1eb275a9b2ed23f5eae79a9d57d6bc7ac6f082","086e176eb6519c51f791fcd7d1f1cf11b9af8b1ec6cdf6772acb83e13e1da912","33f0c207136b5e5f15198fd5fee5ac8599f8163ffe39734a8f7f2847e77c41f8"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"de","page":"theme:taxfix/ordering/de","quote":"Steuererklärung leicht gemacht","rating":5,"review_date":"2026-09-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.