Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Malgré la mise à jour, impossible de se connecter.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3082153890

Proof data

Record hash (SHA-256)

fa2ac3a55f035645f3efa2abdd092727c75746f47dfb06b4430bdb2999629f46

Signature (Ed25519, base64)

vSGB2AWXaUC32WQz4K2QvZVz+S32fIt60BqHTRVfQg/br6J17q0Y6rUcB2PW+tL+9FpE7OYVF6VrVIms8+UDDg==

Merkle root

400ee8bc8bb6e48ec8bd5ac7598e893e5cb7545daceec4f0578b6b1d061e7911

Merkle path

["fa2b34ae989efbf92ad5b67361ed94039c6846d41de1699a9fc9307b4d40431c","1601d5bf8864eea9ee0dceed37f46d2176a1c1a17a5ed5dc6efc88bd31253e4a","49c88834b5940b941eeaf07a789cab7ce93eecf88fe6a45c9aa7ea9970d44303","ffd2cac4c7e7dc282188ceb37ffb3b58f6c0589b955668995d7a6701dfca2414","67e1903b8f308cd4b6471c1c96d265fd091736b41fbac5109533b9d9226cd520","1ffb041371b67aa8f4a1afd283e07309e87a4207e957cd70cd5f638bbdc219c6","684ee9fe97b58e1accc44e8422f811ccd7a8a2cb3731d59a8729e5612927980f","f6932b5da74b15066df8c5470f3e8bd99c3058182813718b6878e3b97d3a21c9","b024692f90a3a74ec98a1c326bafae55ab773db8f73e3c0337a5c23c3be4c305","bf87bdcdca41d6c9e8f735c11682b370038124d05b4b6e37ac713026e1706947","2e8d65b854cffd456d6348161e2290996b148d79433e2a1be3004b966cbe7d46","b0e40126dfddb68ba3f9122ce1a818667c9ffe603dbd0c87f93e7a183ead2b9c","5b29d93873c30f07ca2c717da52ee52806856b3ee1063db3f502e4e0b241fd1e","02d2fd729874a4045685c92de04d21af3989963c78ad36afea7dd3264421abb8"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3082153890 · entry 108e9186e8c5677a31d2…

Expected log hash

cff4076b1696aa395d1840cc38c433580d1b7821d298d64e1adff5db6503370b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791175845570","kind":"published-quote","locale":"fr","page":"brand:atupri","quote":"Malgré la mise à jour, impossible de se connecter.","rating":1,"review_date":"2026-06-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (400ee8bc8bb6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.