Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“So schlechte Internet Verbindung ist”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
faf56c5da32c42bce0417a362347253d3ff49e2085758868ca4202701f2761ec
Signature (Ed25519, base64)
uEKcpPmRSudO4kCcx1lzy5vtRSxwCSfZyrftH/yeDZQzFsFkDyK97wf3P/P5eoMOS4I/q8awI+ZeroiJ3Ea3Aw==
Merkle root
9ca8f1c1ad15a78206ceaec922c537c0b0ac598e12c9c25877f5e0e19de38c6e
Merkle path
["faef6c189ebbf15187a1bf80592258463832f5def6212a57bfe0ce89efa0c46f","561cb018b668f744e612c1efbad29af45a29e0c6a46155a75f482b968a850e90","9591ddecd015b0e6929cca1788d7188ab4c04cb55368b74901da318a1484bbeb","f551c3283cbfa7a0a272ab1e7baa923bea4ccbdeb02c7154f0162eb9ab091c05","3cba03da3eb7515c7c4addf1c988347b53cd7b1733ec50804cf2ccc61335165c","b82729b80cc3e503993bfeb6dd9f9b92b80b42cd2d151d58ee23824ffc49ab76","e6cb8c82ac121f3e854121f4e27f0324db4515806740528b751aa01ab3ab31c9","764edb4e4be338761c63f61f4853998e1fb506b82a1e4ca0b558222eb99191a1","94bdc098507d2b10b0aeac9581b1086ede4163583edb4d4b80c656167dc051ac","5489f270389bfacad4fe56223759cb5c22bec8dcabe1de405cb159d6b1a83b99","0de9458eef5c5fd72bd101e9230b8be27409babd0b4cda862df667f0aec8c53b","0a576056ee16c853973c1ae5f2e69eb8307a6c11579960d3bc89f852486ab500"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543154575 · entry 108e9186e8c5677a0eab…
Expected log hash
0099eed9d12aa99aaa44ed875b87ffaf90c46527b61dfd92cdd4db2c148aef65 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787284115102","kind":"published-quote","locale":"de","page":"brand:sunrise","quote":"So schlechte Internet Verbindung ist","rating":1,"review_date":"2026-07-14","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ca8f1c1ad15…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.