Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“At least a couple of times it downloaded 1GB of data in one go”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2541942774

Proof data

Record hash (SHA-256)

d0a77a6d330f0cde05febbe3fc802e3cb34067f155445c53c1980108b9327982

Signature (Ed25519, base64)

Rzf7jdzyxpMTq/9ZUMc0Pft/vxu0Fyn4cEAYk+cNBpwDGsulZmgKw0lsxHBREsgJh5cxZVVupTE6rsUFlflYCg==

Merkle root

0fdf8a945cf322eba60395065bdb38bb3eeb32c52e065b6c93c48bb56aa3bb91

Merkle path

["d0a60a3fa9b0764baf4b6d8f03476308c8c5e9906a455c8cc9c37d3f97f58754","6df560b64ccf69566ebceb94bc143c1e5683015dcd8ee4d87733dab0ae2060ca","ed9bb17e32eda9259ebca40b106e213733bc6b1fc5b30ff49cc6c1ee1ebe278d","98c7e5c4f9cf0f31362630de43ebfbf5c8e66f4c7d5a7723b9536691f82e6743","40070857deff673501e585d08eb91b66166e3e41d1647b67d75d450b65cda0c8","49ec396dbe5bb1e79e9804ff802ce52fe7a4eca36c8455eb45122408c624e2ec","1dcfb805dd59e4b9e1dc3b6062abafe741e8bf16a4e273f3fb5145df91c2e1f0","8aa056a7a44d10d13a825dc41f9e585fcfd0b75144926800775493fcdba3f70c","b3c6f4a73e3c25850f928863cfda6b65d450cbdff1e9bc8fc1516e3215a4befe","212dcf63598e3e9ccb687d49d5596f0c69903c53a2f0e759f49e0412e50b765b","17bbd52349b2d4cb69341c536093160e8248bc72910430b06d54b43ea6f43159","33c64303274beeffa3bc75829616105d0bfcf234f53ab2deb9be90607303cbeb","9ddf09f06afa614dd76c7c85d2dcdf61dab142db3933b82e4467b5686130b5db","9df2bf9d1d071ae591fbe5cbeff73846c3d5554d23a78779c9dda4580ec264e2"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2541942774 · entry 108e9186e8c5677ae0bd…

Expected log hash

4825ba618d3c3368179be13912e101812df871de37f30b1ec256ca6d987713ec The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787277864570","kind":"published-quote","locale":"de","page":"brand:accuweather","quote":"At least a couple of times it downloaded 1GB of data in one go","rating":1,"review_date":"2026-08-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.accuweather.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0fdf8a945cf3…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.