Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ging schnell und reibungslos”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
9bd522a4893fbccfd9bcde67c5ef281f84667e4dbfd1889c82e0e36509f439c4
Signature (Ed25519, base64)
DllNR3NHSJoZPMcr5u5/hGlfAKwD11O6aY4VFXSMhnxebtV9QZw/ck99ZRlVpY2dpJzYk0Ryfo6xEfJpfQNQAw==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["9bd41534a8cf62f9ba2e0df7b9f933e96f41a7400695437450dc262eea2b3eec","62603f797a99f4b59ce04113c9723fb008baab07cb672577ea60b7e42ff70784","59d4383ae7f6fd065122ebdad7ab59f593487a96c1c95e01eb919feab9927fbf","919d80753551db4dc05f7344ab70a5afe7ff94c0176d891ea86b40e838fee261","987a5f5fb9c5fd7aa49922ec43d40850373c032c163191f461c6901c1e93f476","21848df9eee775e81a89dd3090d4c3f72a03541fa7e0cece621c774fbc01fda8","25e3df3f445f8e1695295be07c0d13b7614971f4e80622eae168da213a3939f3","7b2f3a6c4e0a2b7e5d8d4253cb7dc1dcb9c001b72428fc14115dd54fecbdd58c","637538b891a5221a722449573b18c911d448549dec68ad89951d65cb0341f166","4d999e416f59f320111b9631592e0cc7198c1453da469f1518903d5b46f23654","61b90c5bec015520a93fed3ec611a4e6916645770507b216c12e8ccb7d079a15","d046eb0bf36080da0db9d15c31b0c36050d91d8321edba42a422de4558edc2e9","47bcf17e9d39d99398d6717a5a1eb275a9b2ed23f5eae79a9d57d6bc7ac6f082","086e176eb6519c51f791fcd7d1f1cf11b9af8b1ec6cdf6772acb83e13e1da912","33f0c207136b5e5f15198fd5fee5ac8599f8163ffe39734a8f7f2847e77c41f8"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"de","page":"theme:taxfix/delivery/de","quote":"Ging schnell und reibungslos","rating":5,"review_date":"2026-06-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.