Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Funktioniert nur selten richtig.”
Google Play · 2/5 · 2026-06-30

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3199014646

Proof data

Record hash (SHA-256): 9d3868b40fbb09b0dd56634e276c741249a0d4da04e9a84c0d6c585abb6afa6d
Signature (Ed25519, base64): pz2GgutiiHAd6aeusg2suay6rTSBPPvito8MKBU9naubYYq7Ot+ql/OCJToMxAwtvZLkEEwHG/tkH5j013kCCg==
Merkle root: 79268b3be1e951447ad916daa23d94d3a225505999279adfec84e5728be030d6
Merkle path: ["9d3349eaf6c787499ea0cebb5831e2d408d6c8a7e7eb4469ec56389c2ec65542","6fd1db89c32f85e273626cbf8ec62c3e05ee6ba55b706249ed1e2224cf05837c","06ef5163c3df43cd2a2b3b89dc2c8fc92269b22faed93da4977b351fcaa4a227","ad4ddf3f66e66715a446321340aa2dd9a335b56bf8b92d470ed60c7d6d985736","fbdaefe2c99b48f3549a3dc2af8f098668cc132175aecaa0858f5f4460efa100","744098540667d924fd4b29b4f2bddc5f39917a6c32832d8ee326ac93ba2df0df","afba2342dc34f3fec9a7bc09750075500c03677ce9888c5868b737b2abc15ee2","29972397fff8a4d83d7763b5923b173204a9e1ee1d115bfd67198340b880d80b","afeb09dd3b7b95023de4cd4a9f8e8bda0938b447e75ca8e983e39ef4c6a9ff37","47b4ba828b3474e98712ca1ae708725284e385b5b581b47241c8e3551330e083","5d3f2c412fcf113d17b7d1a2e17084144235e9074182d51039641bc87099388f","ad5bc817d35a8af6c2a6861a467bf6610c64dc637d9696e5c34278bbfdb7bd26","74e20358f22d3c7822130916fc5b1820f80fde4637974d701c4ff5157f85847a","0ab3aa475f500e8d66c40b4801cc7a1f5d3842b8902af4a4df8cde297d138a0d"]
Anchored: 2026-10-11
Public log entry: search.sigstore.dev, log index 3199014646 · entry 108e9186e8c5677a77ce…
Expected log hash: 55430b734e4d00e4ba9c340c7ab064436f91281dd4cbc27c1ffc37d3e26a0e3e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791688566698","kind":"published-quote","locale":"de","page":"brand:atupri","quote":"Funktioniert nur selten richtig.","rating":2,"review_date":"2026-06-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (79268b3be1e9…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.