Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“klappt stets bestens”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2495023211

Proof data

Record hash (SHA-256)

9d699d7e5576a98cf4b9e50d5ecb1ecacd51b341bdb10767fb42831e03a0ba86

Signature (Ed25519, base64)

3/GPMopZZ6f6wpipMfg11eGCt2dR1UWuShr+fOMnRG6AVpJuz57gAMdLkUNI5rUoOMA0gC70uCvAlPAAXloPCQ==

Merkle root

06e613695f6fd14fbb088768a64dcac7db7e51e20377c5553a89e47a3f170973

Merkle path

["9d67a0713b9de3db019328eb630884ce063fe8d70c1ad249092194f9a93aaf67","57aeff00d1c6e1498fdd13923d708f00df10390563ed7349c3db38fadc18ebee","bf1f2e2f2e92df1b445237278874e2f08abab131066eb2c9ef274a0d8e267260","2f123db3f22e64d3666acae42f97430f048273306cadf00482820ea98ab7de20","34960d2a89decbf154096ed6dac0bd56febdbfdf4bc570623dd0c2d681b5dd2d","e00506d3542762c0e781a7c47d8025b620df4537b360c4f51239037a4a10336d","fae6e62671eec7edbd8ef150d432e5ceeed1970ee6442cdd1edada514d563647","256ce0dbcfbd1c9e744af9c41dc2fab0f483fd4fdbc007d37371ecf09efde141","f419617260ea33ec28f2b9ebc00f41b0732244cb809586a11c7a45331bd96980","2366f613540d34b691e03bd7c094de8b8d21255e6040bc01dbb8be9a935bc2a8","8ca911955e04ba9c00ca5790bafa3122843176bdc6d0630cce9444bdd463b2a8","71ccd3050688f7e88a10d3e5a947645b5f32b04b6e0e86f842617452ba156691","3b95fdedb4d0bdb0dd17d352a421b89912dbe4f0d67ae97bb8bd041705016307","400ce1ccc3c815b307ae73db15f03aef18cfffb5bf64db44116b0e0827802595","57b2e297f685e8e9beb7c252d3751724373d7aeaf3237e21b30d90872aed5bed"]

Anchored

2026-08-17

Public log entry

search.sigstore.dev, log index 2495023211 · entry 108e9186e8c5677af4f0…

Expected log hash

1a10a3fcbc3c3ff2c5a6cdf309089595ef78518d7c8e1569414b6c7875f49d97 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786932055373","kind":"published-quote","locale":"de","page":"brand:nexi","quote":"klappt stets bestens","rating":5,"review_date":"2026-06-24","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=it.icbpi.mobile","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (06e613695f6f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.