Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“contacted support but to no avail”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f10905c7258e88d7f1fb9d4ae242da95f96d6e60c5020bea1aaf2e9c52d93451
Signature (Ed25519, base64)
siSb5CRgkKO+i/c832lwoNLdeEAngbx2m4X9XjKsVoRHRcqG9mDCn0KEOYMb3TbkDSoxFLgNZPPnGmREzlntCA==
Merkle root
677e672fa444dfe5152ab91687c577772e13723ca441b5c8063508daedacfe44
Merkle path
["f10c1a6b0f0ea39eb40a1ff9f28b5c9380148c800d6c28a231865fd5b6174346","d1d254bd5bab1ec91373c297f5318b9bebbacfe60cc0fcb144649e6dc93a7ba2","efdeac5baf5c06a636ce278c09671db1f1c646c456290fd08328daff4a9a0898","336a498ca2d5bf4eae0b0f2109ce4f96f4b1bfd84bcf4077664178d1073b32be","57cc2de39397cd4a8767fda0b1398d1f46763965fa1b415dac4966da64b1a7b8","db2f0c2200dbadb34bd7fdeabc85e69921ffabee91d7c31a29a9dfc5b81dc016","8d216ae1d63b81e82e67aa7898bcda3b564caad01758d2107805360a393f2bff","bacb05328fc1fcb1bd9a0948cc5dfbe3212a7110b08e08977420fecc2e958940","55778063a78a2f9b6f340e1c05996cf5717aa1399f814786ca79f58e69c54096","ccd8bb1fe151d30d67722da755a7c8d37e34677031eea07034cc1e3521ef76d7","9996cab0370a31c3268659d4f602e6cbcf02cfcb4da45534ea6cd5d09c5779a9","9dd4e89b99569bec52957a12657064e8f629f283cd7cc3df25b3ef9a4ba730c4","5bc7e6567f0d1b99483863b82e84c2a2697639aa33aebfc220df5a066aa7a9fe"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514013184 · entry 108e9186e8c5677a6b00…
Expected log hash
a596e5a342226b61371cdf76b5c8be8e37a3d00e7ffe8f7b0b550e1a8d1459dd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787122978040","kind":"published-quote","locale":"en","page":"brand:threema","quote":"contacted support but to no avail","rating":3,"review_date":"2026-05-12","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (677e672fa444…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.