Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“super einfach und unkompliziert”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
d45066acca6218b1470c5e9d806bc5fe503ef3e5bbc47c1ec1781f5a22747d23
Signature (Ed25519, base64)
MFotHq0gnOoW/bBMGRyhZw22rPw+iQNKau+gVm69TCuGIgDpT+5IGNCqjGE5RO1qU4fGHqMJxU6kf/uzpAEYBg==
Merkle root
a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c
Merkle path
["d450877f7fdfa060b90ee8455048e6b60255d898bc86e147ca584f5bf2e8af97","725a8832ef1fa9724f21744f6b10a01775759d162b993b3f074d4a74424027a5","89560db35e0461fa82e2d6c2c1de7f9bd7857824a8f46917fb9a85d76aa25ebe","796915ba5bb3f8a46c39d748e3d9b9d6fb679f5a22e778c0d8cc156f34224255","f36af281f18f24bf857d6280eedd7e1cc95dcd4351156153e6575fdf817e9a21","fae686d98a299da66300df6e186b4421c04373090bd823c328d722a4f2902624","24affe2df5482ebaf762093b9ad7aae1795c708244ffcea5abefd014f12d7ce1","a1d2973677665d54db8bea82ae06534b131df77012717c8a9dde16f4d199c58d","07342fbf1d29c7dceddeb382298b8dc4f565c4f91ec26103b311aa795ec54c87","eed28583676f64b92373c01631bf717f247ca302a021fb25b13b72a5056ca45c","c80b4a423599bfb56ba540a4255229ac70cad05626a90d6362ca9395d72c28a7","589714cd3af91c9cace4af17f27ce411ab407960f2c1eca87150a5acdeeaab70","e3dfd0ce13b4f18d9be466f664decf913e4c761baf693ad01a6280777721ad5e","96604383e0e3cd500d4560285508cbcc8eef5ad88e576fedea27dc38c3fc8ebd","142316fcc45d8fbb9a33df6e9be8f563650927c4e612ee96d4bcac9064ee60c4"]
Anchored
2026-09-18
Public log entry
search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…
Expected log hash
5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789619628558","kind":"published-quote","locale":"de","page":"theme:taxfix/ordering/de","quote":"super einfach und unkompliziert","rating":5,"review_date":"2026-09-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.