Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“since a few months almost unusable”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
c2c4ffd1a40065572a016827889a8abf9ff59ea02d0e71588f68c84d943532d5
Signature (Ed25519, base64)
80E2UWf8poKeUhPHaVQvc34UuVdQW1SPq8c+I46HIzDV1LeXDI8xauhy5Bhd6wj/Ew/aC6mFjul4Hk3gHsybBQ==
Merkle root
2cd516e344e4be63e12361494ae610d89d15708131c24034ae0c7b134b8bcc53
Merkle path
["c2c0c55a409ad053865be6a21714e54a003247f8a4c597bc2fa9894d8f0f01cf","58909be980b40bf6cfd6cd14f367712759a710f362572476fc327436d264e6fb","a6a5f41302ace21b7ffa58694c282b3f91eb665ebc3bfa27adfdb658e230de7c","4497398e11edde4d982cff76e32e7d3636cead843aced1ae11469f0e713faf62","f9668970f34772ed7a9182a7493d3f7ada8200a992f9f40d8680771ac7650bf6","908d330fcaad0474d3fafa03fa9afd3fcd797504c8311af6c55c2bdc18ab3516","72ec50308b9cfa2b589dae1a90b262aff177e5956081ae9c42f2becc72f29ff7","4a92e2c4bfb9ffc4dd7f862848b990cc1aa881cb25481b5882cbbb842063da9f","b1efee6967a481d8b5db71af5886a8279a300881aad5bbd65691a1079f2368c0","6f7971fffbcc4dccb8e55bcb078ff6c3fd36fdc8c0cf295bcd63f2bb384af814","a8ccdae4cb609c3165d01cb7725a3fe0833afe6e7aca0155a9f3651dcd754415","bef8a50ff7b4ae50e415b6a7b0c3df0d06077829a8e5f7adca83b3fe9187298a","00917c86694590b26a9759072729e63fefe3ce762c543892a64cb6655299eb95","cda30523fec3f0d7bb757043316994e9f10c4260ab2c72c5da653846620fb3ea"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514341362 · entry 108e9186e8c5677a67a1…
Expected log hash
81a850cd5c32c6b6ee86a2774571659cf829f205adaa17a6b9e9a6f5bef7642d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787126744998","kind":"published-quote","locale":"en","page":"theme:threema/durability/en","quote":"since a few months almost unusable","rating":1,"review_date":"2026-05-28","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2cd516e344e4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.