Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super App, die bitte nie eingestellt werden darf.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514130917

Proof data

Record hash (SHA-256)

fb3ffab50776fff2b1818f9bd92351332e76fce69507dd586a089ccc23cb539b

Signature (Ed25519, base64)

529Mh3ZJBg6qCPXPBjGoAvHJi1s6o8/SEr1+XflZNkA+dIVyO5p/6ZEj78Q+TkSx24TWbeE7GbCluHP4XX3MBg==

Merkle root

72711ef72b8a7ab084630b9628ceb2defcf0aae546304d44ed173db57929457f

Merkle path

["fb401af175fe9c300d0b5a83bf7cc63307a5d7993327900297586f3f81f9ff32","e1f0f76969d3d96abf9b985771ff3bd4fe5d0587a5fe3664f96675e2538371d5","153336b665ba075a81327833e2c26094439d65ee28d7c0a5c15bfd4946b54cfd","9ef16627f94bfc0b45bb1efa76919f80983527db133481cdb6f390e24ec2c444","c43e1abe241d87e64cd184c5be309b868bc07c0c6ab57b7beb42f5e9a01f0295","93b1ac3a24ab0431ee575b47243627ec59c3038c27f4ec1f867ab07c6fa2f8a5","eff6373b60bfa35f279d17199e2d68aebb82dea7eb3ebc6efbf8bd072a517b1f","094299c737f2c359fff847c1892e5219c96ce781c19410f717645716dbc23a76","cf5164b311348bdecd9b8fd38462c4c34364e30bc88ad982b6c401aa25de6284","ce3c5aab2caa93f4a4f61b24c562c5e71a46b221e075facbebf268ec0b710efb","bad496ca101ef558ad604774db4082a9da7dc7de7a674c932ec7618992c46946","eafe311a71a1838ff3b1485f258dcf82b745ff01c6ced274f8d1b0da75f41fe6","03f0d2dafec654000c7e5c6011a64b6127ea86884de5baaa1829908da41e288a"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514130917 · entry 108e9186e8c5677a3273…

Expected log hash

65ba51eff926c65ed0ce093a942d84c628d811a59302f32867c6589627e47792 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787124488047","kind":"published-quote","locale":"de","page":"brand:tomorrowio","quote":"Super App, die bitte nie eingestellt werden darf.","rating":5,"review_date":"2026-07-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=co.climacell.climacell","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (72711ef72b8a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.