Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The one time fee is great.”
Google Play · 5/5 · 2025-03-22

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514629481

Proof data

Record hash (SHA-256): b463256f915c67beb5383d0d5885af647075bd9f2bf0f3e9a0e593e5b1ad77b3
Signature (Ed25519, base64): nhWABgqWDSN68j2aNJSEEjypbGGY7p/OEmZefYhKAgUxJaFhGJ/s1a3s21VngsHtD9hKJSOWYomelKPnvYG6Dg==
Merkle root: 3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2
Merkle path: ["b466aec4b24968db4e1d624321e793f921ebbb65659dc098d95fcab8ed587f20","b85f077275e662eac165e0c37a280fac61eb2f0caae6f74a4b0da323d7a21547","bf1bfc6c10c0ef76b5cb1e80ae3ca6b30d539d2699188543b2393f5da16276e0","6b7785aa227f9a6b83657e759e98db0f5b2e035a645018420a8fdfe639c2aaea","b96c52b1b8f145953c3f515ba8e1e2d1f4ded2dac3c9bb149628c3a2d019a444","ca0bedc656af4c16f62584e75c6ed36252a263ae8d566e47aad5715e7da24273","32000706e15c1a71070441bdf4f8f54a454c9780d7c4e162cf00caa59e77a710","fa501b9081e8ad32caa4eb72364582222d8cf48ba569249b2886a811f33e22d3","a615b03ea2f3bf4a82507248fef14d0d66eb816896cd32132050fa6241e2b284","6e24ece235c67406175f2678f3059863962cb6796660296bf61a3c0a413dcecf","dfe5b3bb1199aa0ebcaa2e67c72313567f3013695dc5ebe35422dd7540f4242e","10dbf1356e5fe67074466b297926e35f3fcafd900eecfe706b534b826debf1d3","94cc16c314f23592e99cf662d1e0fe526acdcfb48a4e645cf6fa83038dd8bf75","2f00626bc88d01c042a52bec5a9d951d8fcf3187df280beda8f094e8085a220b","6099970369039e9ea9943621e6c4ddbe6cf64be652afb6debc70debb01455286"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…
Expected log hash: d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787131980797","kind":"published-quote","locale":"en","page":"theme:threema/durability/en","quote":"The one time fee is great.","rating":5,"review_date":"2025-03-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.threema.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.