Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“On reçoit tout à coup certains messages avec quelques heures de décalage”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543383844

Proof data

Record hash (SHA-256)

f6f7755e26f518f6bba352db4a7ee93e357e59c31e6e4758d6cefb7d8c648b88

Signature (Ed25519, base64)

75nJZlxPZY892v2K9B2vjvr9ViGqsIntVdqbHeIRwlOF0d2P99qOanSBnDV/WKGiqe1zDr4aT5MW00zXXyuWCQ==

Merkle root

7252afe559009950531df937e7edc9bd1c57cf28a24ed7f6c6613b65f459eae4

Merkle path

["f6f6b350cca31a47bafb814fcf903f10fe2fca5fb722dc49ae8c70e0bd039930","fc8d8257530c4515af59266949fd26d7fb8f89593121d3ad861993442370a771","764af06ebe6b0e525f59e03cc297019365869548b9cc6c2544431a11b8d41ca0","9ae070c22cc801a63c40c52f2fd58310c4250407b4be693c786e1f651cbd236f","9cd3221c7a4df2474d68466791db52f8953539d0fd75a11f018ce9da1a98a77c","ca3eb9b645e6a7b10c244cfc9821f191103e8da7d577ee729f8045f7216f301e","a0c305e440dd01b95ba831ce4de6cef5360756230af7a34580716daef10842a3","7d6b2132922eb5f5d87afcb62001780e22569b3157b23fff08e61b21a4e1e32b","acca4b066fe812c223082d679a92ae2c02f629a94d65d4ea49fd2e980e02d4e6","c2a82b3b8dda804db90877eca311791028bd7f6ce68ab9acaa8b7fe58240eb24","0cb2be899eb0e87e0c84c8010f32540c0ff4f02ee38f8970424d4e3f7d0d393c","e3ea462a17033cf2b2bb196bc5b07383fce456bc3220c1b5de266e7e78fd5dc1"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543383844 · entry 108e9186e8c5677a6025…

Expected log hash

65212d488cd7bdd0d67aebdd70bfc57f4b622fa08b8179427635d69eb7ec385b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787285599851","kind":"published-quote","locale":"fr","page":"brand:threema","quote":"On reçoit tout à coup certains messages avec quelques heures de décalage","rating":3,"review_date":"2026-07-08","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id578665578?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7252afe55900…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.