Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Pour 4,99€ à vie c est pas cher payer pour garder ses données”
Google Play · 5/5 · 2025-12-06

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543857133

Proof data

Record hash (SHA-256): fa593a30998279982016009f33d42473c2300afb7e0847bb743ad10cd7014856
Signature (Ed25519, base64): 4g59qjzIeDWDnuM913Y57poFZcHe+AGo8IIbTuAye5QWtvvOISnTDK0VX/vH0VcdDm7foYVuZnUIUJdeWLN6DA==
Merkle root: cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path: ["fa5d185f4584ac089c1a40ce1e46352f620a7e25758b189ab744760b5b447180","970634272a2f261b227f2932946d834cd333ac996065ac4ef245ad68c58ae074","e83c6f981348d91590013a972081aba29b0a1b75225f832974784dc265e90d62","a667016d6d09e4d7155d4d5313a904334a90a8aaeef6d8ae6f7a93a494fd5897","c50a9cf6d2e846b04059d577f16e8148d95e9fb57e66e8802732c7f1f36a415a","53c564693bfd3e6e91769d11e7a8c7bf6765c632c1470e8d18b4892cb0e43f9e","5e9f468318d8f8cd644925619e1205afc65fbbe4363957939ec3f5499690af8e","ac6da371a43503f055025c094575152b6520a03c7ef8ea2ca3be07e68a410275","e5d3675f25154ebe469fea761163e7678781c43006a1c0f44085220847f6cbdb","b282c644368424a4703a3c55f90b43564b2fe34e5ffd4cccede2673d849bf9f4","8eede5eaaaa39aa311d5d82caff567170f05a3f5da864babf80accb43c38ea8d","78caf62780a7cd32d3591546c7643819cd8e2ced71a3bdf696f7fa96ed9676b7"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash: d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787288037224","kind":"published-quote","locale":"fr","page":"brand:threema","quote":"Pour 4,99€ à vie c est pas cher payer pour garder ses données","rating":5,"review_date":"2025-12-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.threema.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.