Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich möchte kündigen, aber es funktioniert nicht!”
Google Play · 1/5 · 2026-08-23

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2969645630

Proof data

Record hash (SHA-256): c06e44a391daa82dfc948c240e1ca2126281a8bea9674d7b4682d3adeaf5a96b
Signature (Ed25519, base64): hJYPYONkWBj5nrMYLucCtMYQ0zmDAjcaZU2l/4AI8gonCDjoDDsySO/6sOBnw/1q7Kkeq+SOKX1wYGVpDNP8DQ==
Merkle root: 714fd5c453665fb7238b83bb755c09ceea4f24c6bb04f621046ea8b9d5da1a83
Merkle path: ["c06cbaf7e71702384b31f25b8927eb3b2c8247af2c32a8007b2c824e01351249","6ebb85c108ffca77ce187c5d3185ec258268b5328db6bab6eb5120e36f467da0","31daae7c53a451b679323de2dd151f7fd21ad0f608d4e6be55aaece94022f8f2","844f730f95dfe05473159dca51a55a8ae786571e3b2536476a7c3bd62db399bc","349ecf95ca7b0c1cfa0f2f1e8f48b53eb055b45802a9b424c9d2bebd2a502f7d","e0068e9a2c830dcc966faf2352eeb8d465e3b52a329c24f19bab15d43c206b9d","79979a135b377a6f98c09ab20e402f6ac1f7fdae1c5eab76eecda50625f8dedb","172b4eb4c40df2556efec9df8d631c626a3e730c44f8053ad547196082499185","6d8278f4b2b0efa13c549677439dc496f20c23771f71c78ec3f1a459ed5d2c54","b7f37f271b741f6efb4dcdbbf26d78902d3e0d5a1a9a478aabf511c84ce605df","26cbd6695748da6be8919f18bec561e58eab8a7fe3bb3b7d6a2a9b903bd449f4","80cf829c0a7e91bff60baf31441e77166cbaebbf1d7eae999f780e68da49f65a","ab39468d7f6d6d2b066f12aeb98f5c9967e5ccba4692d7d86cfb67d068d543e1","ffb210b308bc632ecd4d5ca929c95e61f0e699394237035809779b12d35fbef5","63158f878f18fbfd8c365d55048a9cce8cd0631f6b0e87630c3dfd5c86aff59d"]
Anchored: 2026-09-27
Public log entry: search.sigstore.dev, log index 2969645630 · entry 108e9186e8c5677ac05f…
Expected log hash: 9c269d3e82dba16de30aab3330968f6013b6b7908bdb2f7b3ce0083771a2fe3e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1790397996853","kind":"published-quote","locale":"de","page":"theme:everand/billing/de","quote":"Ich möchte kündigen, aber es funktioniert nicht!","rating":1,"review_date":"2026-08-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (714fd5c45366…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.