Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Einfache, gute Erklärung”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
984524c77e7184de68265048f6ba88b2ae891289c6cd093fba9be2c5347a1206
Signature (Ed25519, base64)
c8w85WWCPS8J62KhsX1/TE1B8nuTjc2ePkpSCW4ZMXMxIoycpv8d+wQaOW1B4qGFuDZjNEeSRJa5/TUkQzbeCw==
Merkle root
714fd5c453665fb7238b83bb755c09ceea4f24c6bb04f621046ea8b9d5da1a83
Merkle path
["984506550ca5a8baf2de9414cff47f68a7af8333598be7c2865d0125bcd890ac","11cc9f788819e0b8896c68ddc132717f352e5d483cea54da95aa10dba569ed92","012a7964fee8208420407ecf3cd8c1bbdec032b08ebb467441f61e5eb4139947","648e515823e92afa494f16bd5f90e05e1606ed1356dcc6f070d7e88830aff9f7","c2401d149e2f5d73842541ec1675c75786a0b51cbac547c5da6fad99cd0f6163","5fdebddfd8cf71ca36cfe0a12f40f4a202f76fa618a5c6c5428fb3d5f11b6b74","e105f77028159264bb6386cac7246ccd52c1bc2342035a8b59ca88eb6157e45a","db79574e2538991b3ec624beed1b186ef95acf265ebcff9069162675b896a514","086fd0cfadc2063d466c97604d6e94754f912d3b6366c7e38cb110b4d54b3c50","4db28a078273a283cfd673d124dfe3ef28cfd5b32f9cdd9fa8d0b64d11a53404","bc09de03478713fa7d86a1e1ef51bb53a46a140b56bffc65405c80111e8d4da7","ffc6058a33ad9ddb7d8cd6f4a166bfedd51c9087a36621fbcb9b1601ac90593c","47163008fa203c3cb3106d569db6512eb1188a0c538bb86119031584c0998d0b","ffb210b308bc632ecd4d5ca929c95e61f0e699394237035809779b12d35fbef5","63158f878f18fbfd8c365d55048a9cce8cd0631f6b0e87630c3dfd5c86aff59d"]
Anchored
2026-09-27
Public log entry
search.sigstore.dev, log index 2969645630 · entry 108e9186e8c5677ac05f…
Expected log hash
9c269d3e82dba16de30aab3330968f6013b6b7908bdb2f7b3ce0083771a2fe3e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790397996853","kind":"published-quote","locale":"de","page":"theme:taxfix/communication/de","quote":"Einfache, gute Erklärung","rating":4,"review_date":"2026-07-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (714fd5c45366…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.