Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ihre Website und App sind sehr ansprechend und einfach zu bedienen.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3240367269

Proof data

Record hash (SHA-256)

9aa6f9f17da085973db2dd16f6e199a47aad0f94b30c8f66b49e385add642405

Signature (Ed25519, base64)

vGokrbwTk1G2V2817QOuH2xdQrJ0CtNz5OEeVe+4e+3n4VQVLG3F9+HQVSMhqBCM1TXWog/YRTQGA1mZ7tUVBg==

Merkle root

1da6cf8d96c8876e66e82e9bea7529c76d7e25eda1c07550505caa1baa49c4d1

Merkle path

["9aa08fe1bffa7e535f6f39eff462f0eb9eb8a66fe5b2e216dd2209ea68c39252","fb3e25ec2c45ff3d8f752e2f6afedf1c7043d824560881612fab75574cef112c","852b010b58c433991273cad9460d61b80e99a94335dc020ba3459981e0f25296","09391d32c72b496f7b65d2be502ab2619b8649c3de5da104e64b50d70892d4fa","bf044c292cda9adf59efa0443bc2856ca50aa8121e9fcdd95e71e01333c899bb","dba0c3bd2d073b02d7666ea4cc268282f60af84cc808fe25431798c1783bfd66","b099fe1aa773a6d69d9efb35f562fbb7a9e4c7c744d7807f207a82a2544ba88f","017c729c038eaccf413afe757e0bbeb930e8684dbf3bb0a3d9826f427f57e410","9a361e4776f478f4e1164678e9a568875edfacfa4a796f18340ac137ab67e355","017bac82bec89851c36a4fe1aeeb8d2437a6bd66139e7efad19d6c586e5a433b","10741206a010de433646384fc1bbf1fa66ba85f381ddee336955c925b8f4e1d4","b5a76a0e87f89356f7fdfa12dd35192f474e648f1fea5958dd359925ca8f2f33","ac67bf501008dc802730ae80f3009bbd0325863ea1a2b21a8ec83ac8c2b4ef98","2d81003ff1cd2149e42eace973cb0f4cdd39b653f7b06a20804a1f1025023ebf"]

Anchored

2026-10-13

Public log entry

search.sigstore.dev, log index 3240367269 · entry 108e9186e8c5677acf8a…

Expected log hash

f6397ecd2b8639a3c60345d0c567eb602411c7eb1bead248c760bae850816087 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791861381931","kind":"published-quote","locale":"de","page":"brand:atupri","quote":"Ihre Website und App sind sehr ansprechend und einfach zu bedienen.","rating":5,"review_date":"2025-01-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1da6cf8d96c8…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.