Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I will not be renewing.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
b5406ffb9bbb7594f2032bc38fd3633d4bf7b333ec316c469e6d1807108368c5
Signature (Ed25519, base64)
9j1n1PfWamKh+9LNZ27n1ArLBjHQkRYWU8lpD5KGnebF+BewVIFuR319i4R98Qo+k5Wi7HJkvvNeQbhk8w/TCA==
Merkle root
400ee8bc8bb6e48ec8bd5ac7598e893e5cb7545daceec4f0578b6b1d061e7911
Merkle path
["b53b25bc012290de6bd490cb0497a9c53e76b68e6b3c168a7deb20865e68c075","00710d947be8e6c1d6bb56daad7d0a0623e304cb37d7f5b90342e17f9b74da89","8823c6b96e7648d5094732914f4c6663c22677310ca18f8ff2281fbfebb8aae7","6b6643c280ef49df7c02356f076120bc21e3547d5cd759bc48a3439681641edf","9d2991890f764c5444490758110aaca413d76783eb7229327a5ef172faf25149","24ccbb1dae4f44b5c5eae7305d3a7d9d6fe106117284608394327b5d4c79f92f","109d7738be4c5e863ec6aa3a3fad883cd12a5a95549f6537dde6c020b4d5aa91","c5f4eff3b5eaea1845b6390763a03102db825bfb361b1e0c8f6f7b8ad8510cdc","103a6f23e353e1f39aee68549dee358d4f5460e70969913b7a0c99282e9d7848","d5a7a2e47c281f84fc3a1df5ebc247a0be4325da46fb8adb6db453d51a5f6cfa","6afe7996580b6f808a4ca3f79008b401b04901dc6b8ea1c82b5433d3bf00e3aa","9bce827101f77d53843f53a04487bd80a6e8892494d006046b9eca8d416cc53e","440a969b77eea7732103e570c7520313223a72c988fddbf409cdbd9ab0fc9e51","727572d95b19a4ae886ad98ad495d59fc190c9dcfd7deb626018d1393975dd03","02d2fd729874a4045685c92de04d21af3989963c78ad36afea7dd3264421abb8"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3082153890 · entry 108e9186e8c5677a31d2…
Expected log hash
cff4076b1696aa395d1840cc38c433580d1b7821d298d64e1adff5db6503370b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791175845570","kind":"published-quote","locale":"en","page":"brand:nordpass","quote":"I will not be renewing.","rating":2,"review_date":"2026-10-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.nordpass.android.app.password.manager","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (400ee8bc8bb6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.