Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Login funktioniert seit dem letzten Update nicht mehr”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
a53581dc31667a8f16626099d2d192e9e44fd0809280c9be51f595e959358874
Signature (Ed25519, base64)
FoZ/AEQ1rcCvWDoShuFxBQRcOtCiILt5Z+OthBf7Pp0xsPJmGneDyxTxCbSiYi2mANz0w9jTSm5A6ZrEty/6Aw==
Merkle root
b9a08f9d6d76dd148110a496219c42cf3205c6f982800d84d5c85d77e9461e02
Merkle path
["a53793921329a0753b21c83a9a62273fcc731ecc52a795dcb25356d042d790c3","af1a64c64bd75c685efeeddadd7245a9a1b7923f0e3b96bcd2de895a092bbaae","3e54a95f326b72f5ac4f6f363c09ae68b9b6f6aa213df7341c4142e14926fe39","77e3b2ba6dfcdc98b21eff0ecc6c85e8893b2a7dc5039664ee6fdfa260d41aa8","d6afb8c978e499d2f8a0bb5e49112e3355b11f522c9502194b6fcee02951f536","b3cf9397370242f9212680317a92d6f6027870b1f59a741b52374e399de3f7df","845fb89d9a354364662a48966760af63c6ac0b1baff918f296c71cdd8c4426e3","9dd382ac1380f8a08a6337e734aa7d7eca0ed577c125edd7df10f240225623f5","9cd22cafbc025763dd646c69dbbd2564defaf9af6cc4921b4b5124ed19b9870c","cb85a74a28cb6eef7aa703b20ab89baa7afa01d92706b87c83096840758feb39","990e247af8afe193ae111976d0854ae6dbc82cc0fb2e8be7f20fb2ddb4d3be26","d0e82af4a03d7591b930166e680788d40e9d0f467d2d9124361d17c683e6610b","e73087a4c89fcbfd62483a37ad723e600377233e603592ed8ad92c5db69f30f2","05978e8b9ad5fd39833c65b8b951e8c80cf426334c441fa8a8bff8eb8eeaf534","4543e8b9ac7bd077d9526acfdae449f0a0d5517cbb42414f50ef930ecdb9470b"]
Anchored
2026-09-22
Public log entry
search.sigstore.dev, log index 2907673729 · entry 108e9186e8c5677a06ea…
Expected log hash
bf9a74000249ba6e66b1e29aae9d8cb95c3400dc118569a80e5c0949f3e8ac62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789969984102","kind":"published-quote","locale":"de","page":"theme:v-zug/ordering/de","quote":"Login funktioniert seit dem letzten Update nicht mehr","rating":1,"review_date":"2026-02-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vzug.home","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b9a08f9d6d76…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.