Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Seid vorsichtig, da das Datenleck immer noch aktiv ist.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2913636507

Proof data

Record hash (SHA-256)

a2e232bc4aa318f8ca6476c3f0e21f77f756f7b19d1889e99bcca3665f89d14c

Signature (Ed25519, base64)

b0Vlwexz/vC4O67KneP5Mr9Ye7jtSGdl6BqT+UH3vKLV/AvL1prcaXoB/Vzdnvzod8EdaDZ5DIyITX5iwQAbBg==

Merkle root

f26292e960b34f73f9768b4afc64585e265549d794b35b8167826c2bcda92ef5

Merkle path

["a2e24367371464f8d36ff0ea53ac03a5d8c2c3cdf29611919ecf502522e2846a","9a8dff3f2d24b53c2a99381e1dd470c9d952c5f81d68f402ee4b28ee26e667b0","103fbeb2bc53e8ef452a22567b2affd222d82b9eae5ab903e0de9f80e7c27e5a","b26b07ae476567ebcdb34d44253a1f420f6e8ad3ae85bf4722879e9e2f60f00c","dff7ca767afd6b6ca17c98c13e4a40a7d013448fc3d2583ad966f35e01186bec","82667833c1bc3e610c34a293ee45c590aeb4fab7db964fe1c3b503ccb8f936de","926239b46e9e9b434989268ee3cc0f781b3cda39c956a84829c954f3dbbd723c","5d8eed831c9eb0f419f56f4adcbb63f1efab209adf040ddda00990c693d4c3e9","71121a70884fac273d03181db504a69932f28694cfbaab103dc088ff2a5d6c9e","83e1cdaef7bddbc2ccd805267fb199cfcd625756f8eb8f8d9f1cf74b762fa9fc","dfda572672fd24920819a6943f95ad4310aceeb99c5317f19a653df1f79f0e48","dda2bd27fa15f75292648f9c602f964628d9c021f5588053dbc2603c0cd3f589","edcaec9f8e5156b483404ee77350f2ddca893e6ce1a1eb48e97046facf217e60","ebe1651655c8b61b6b5364f1f9c2df6d3d2570b884eb1475b1f154f5054feeba","a616224c7837fee9e37cf9dfa53b6dc52945555438d928215ead84ba8ccc7b57"]

Anchored

2026-09-23

Public log entry

search.sigstore.dev, log index 2913636507 · entry 108e9186e8c5677aea51…

Expected log hash

417fac9b806377ff48d30ded01faf8424eb98406df713fe2564ee9077747e6a6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790070376053","kind":"published-quote","locale":"de","page":"theme:deezer/communication/de","quote":"Seid vorsichtig, da das Datenleck immer noch aktiv ist.","rating":1,"review_date":"2026-08-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=deezer.android.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f26292e960b3…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.