Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Seit einiger Zeit funktioniert sie sehr schlecht.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3124493015

Proof data

Record hash (SHA-256)

c9788ec013e482eac51495f2e18c0ed7dd5b3795af0ea81dc0885813aac15f81

Signature (Ed25519, base64)

JUFTq9vFJCOc2nFrtkzvwkAcFpRrx9bU0GEC4kGB9f4E462PAnjRkDkefszs8ZeVEr8DIxVv6gMvws2Ltf++CQ==

Merkle root

c481d62412848235567fda063ff4784e8e49df41ad8b5c570de24ba396415d22

Merkle path

["c976bfbe9eadeec15d818cc0c24ad6bb04ad0d71fed55fbe1a96a20193073906","15a65f16be7d2426e3bbe4938f9b87155719e134883a1b9ad9533fab8b64c894","69eead055bab7d3e69176ee680bebc68e71884897e987f3f427727cdd9647347","b11de0011caf2ef7a899f147ed79bbb3cb729db75226bdb63a2753babe6f638a","8bca630449b6ce10495c111a7f30c0d965c6f9ffce5273588a83ce86a29fe1d1","4d2fa9883c5c836603ae5cbc840e510b88ec9b5c2c737a6cb780f510d88fa8ed","81bdbe1a513f80f5f1ba1d6700ab49b0c9890a483152f310ae7cd62b69c999ac","e752941a2f2fe39d1bd0cefb69467e094c4f458477b89ba911e8701ef3628f20","02a8fb1bec938d0cf753fa82628f03988e3e21136852959f7bacc81998d43281","64450163b0fc33e7e07da6c648add9717d28af43621fa6d87c996cf129caa8ed","7e34bae5d258581b386b0f8d63d31efc351031cb8b36fd01dcff44bf7a99fe9c","2f64f7768c0c5f10c470488c785944e2b2a27349d3232c2325a30cbc8d810e1a","3220c8ee4aa60fe021e29555ae2bed0850a1f142c0c3a97b7e1dd7731dbdd32b","94807f81d1501aa004c640d69440b9636cee1d43c6f07fbf281372be591c6480","dac1c339b376d49b10e240bfb32d2ada460f1b51d5428b7290189b662873c331"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3124493015 · entry 108e9186e8c5677aee70…

Expected log hash

0056b042c00529af1248b70a0a2fbed761990dd7841ea722369c29a2685ea6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791350987184","kind":"published-quote","locale":"de","page":"theme:spotify/durability/de","quote":"Seit einiger Zeit funktioniert sie sehr schlecht.","rating":3,"review_date":"2026-09-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c481d6241284…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.