Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have been trying for a long time to complete my registration”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543266411

Proof data

Record hash (SHA-256)

991254620875218f3a7c58f724a78ceec46c0194fb65a5eead370e0a95612eae

Signature (Ed25519, base64)

7tIivCYifSABO8GhCUhDmeVQNMh8lp9LYHHTtD8oX9PBe2E7eYAuCiR7yHzOlvZzDWKeiLwSkvHQJzUotcX2Bw==

Merkle root

8ffad6e97d1457610bec7a891f189d1ba7dd7a92ca672c69ff1ce3283acb4b5c

Merkle path

["9911bc0b6c417fa5fb3337ad99e58f04f489e60134509f297a2f3d5be8958430","6acf56ba5786a69930d7c51ada054089c0aa6ffc90719d96378992c1dd023d7d","3d56e747cbb267a708c681c5c6c809f0519a479867fde0e2a87fce2687fdebbe","bf2d563fde1a823d61e47e2d7d3ea37331f44cb0c927afbec9d4093dde437c8a","84c886bcb74aa56f6b222e3e3adbfb13bb5b57f6d71852778543a13305381900","6f6494b248f8bd551ef4fc46a588036eeb4f6f34f8ed38767216f2cc6b048f87","cbe760f0195fee01571f410abb496bf8ef1a760234d5d2e6ea6d5eba97a11238","69cf84c8d99c6e02f2daa6351714032890c944f2f85b352819e0aec2ab91dcea","df052beb765faaa6a8cded81deebecd0ba95b79197f3ffe54e006f006c972050","78cf84f32e4f76b51b0427bc94248f2b3aa74d7480dd35bd5c472af869e52541","e3846f1a3ee14e660ef8d0025cd543a77fa9d24f1016c0a67bbb65e7d966ae67","9ec9a8df929db493acf468b87619419d60b2bc485a5d393354eb9a1942f9a242","39a48080eedfe395d9b5da7251ccf1f49d6794a6866e66ab48839e2e5cb3a5bc","9d2fe576119ee6748db015f1bed3e423f559575b84b49b458e2b5fc136d5fdd9","e9f7ba9964da1314f660fb2f84a68d574ffe9983879b5b54001a09ca5cb5f33e"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543266411 · entry 108e9186e8c5677a241f…

Expected log hash

443ef8f29d5167ebb4c56a46778facd07b7651afa8db2d089c14a991ce0d04db The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787284817344","kind":"published-quote","locale":"de","page":"brand:nexi","quote":"I have been trying for a long time to complete my registration","rating":1,"review_date":"2026-05-29","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=it.icbpi.mobile","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8ffad6e97d14…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.