Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Muss mich schon wieder neu Registrieren um die App zu nutzen.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3126883925

Proof data

Record hash (SHA-256)

ec46f416a66e6e2195694223305a8c32a25370080b9f8d09bf36ee3fee8e3d3f

Signature (Ed25519, base64)

9k/NzPOTi0T0ZaW2wiYUORRFf8YZoc1QNBXYCsFCXYfNDRrAx8PLy7VVOQmcqm8pRd27ap0KSmeyoQROFFPqBQ==

Merkle root

0d7fec37eb7aa7ca022c461398d36283692153bdca7d5292b2302abb6878e5f6

Merkle path

["ec42efb69115fbfcc6a4c65ccef0ae903a3f19c3f75bda1814c07b16a4c48775","95e08dace91aba479363ea7145700fda1e856dfc11a0bc6e6514bee0b02578e1","7260485ca2215500576d5415fdfedd5d43d43795910dd1dff8f915f244ba00d2","a183e4f5a28d51aee6edfdb8e2aca6e313a7e2205a30b1a97c25045f35351c57","14553450f402d8d0a8c9bc884051b9c029e60479bfd3c466045663a136b6524d","c9dfa2892a859d46e83b460bc364379b3f7b2ffc44f2be1733d465f6a8a1c88f","17ab9758ea62209a9b7587a306f4e6665551ff896de2e54ffc1a2e8d13786f79","269b0ccfe65e2e9519d50d7733b39f0ab969b76c2347438cf350398c115ef17d","af318c2f5a2a9a7d916b12d22d6f9f967bfbd2f364d1295dd6eccb90cdfb86fa","213da1c68242b0dd514321294220b6b8a3c2d31939cdd8320a8ecfa824b3311b","bfae64fedbff69ce3121a48c0952ddf30fcf428d2431b245c9745646029f2830","0fa3a575da66b503a77291657846b5daf13a9e496754b0b1e8eea48517292775","956e9e262109df10194605d76388d273cbe98f6754d203b26bfbcbec8d5e6b13","a5e4945621803ecfaa28b41399735783919e0518f2827e7f6aa82a6ed0687d7d"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3126883925 · entry 108e9186e8c5677a6678…

Expected log hash

7790667e260445bf729ea3061132c2116b163a0e0b944eca343c9e8408350ef6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791359818972","kind":"published-quote","locale":"de","page":"brand:atupri","quote":"Muss mich schon wieder neu Registrieren um die App zu nutzen.","rating":1,"review_date":"2025-09-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0d7fec37eb7a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.