Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Noch ohne nervige Werbung.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ff84a940c524af9f5c3ac8500445e86d11f4b03e2ce18ad4a363821ef259b7c0
Signature (Ed25519, base64)
Y4mJpTxk+dneQRUqNTI0FFYRGN8Hn4bmOygs0kC7Ez5vYkDPIXXsRhWjRNXrUCIVW1vCxPBJr2dfl5twkW9yBw==
Merkle root
681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path
["ff7d9a1992480d35c8f426f22451e32c9a809541fbf15d95e15f297fa00d5182","9162887aad39bcb0dfe4c3462d3b0c372dab7f27826fb25666193724f1b5cb57","b0395a2cd066e933f38e8242b6f9e53e7df420a15fa40813dcca7c33983fbed4","519baaafb0c2f7648d7c756c1173b5f480f4841a326542a99bec504dddeb9541","8ddfdfb83bbfdc4c9db575702e45681375c09debe35ee1feab4f39962b9ecdb8","e02b9b3a44659b2f84933f37ae197137c27db7fff5d0cd8dda4f078aecffea8c","9aaeb4b0f8508bacaf1fcf489424acfd833011fc5f466cf921a3bb72ddf72a1a","6a9f159643de763560bdc1c836539b6555cf08f51cfaba7b030d7e2e51e6f4c9","e054afc74577ca0aa5e7b52a63f4e70bd88a2709271dfe3ae5f3639376eb4006","339dae50e33d50aa0cd1dc447432aefad2a6e04bc149cea692cdd6f203acc133","0931601ab88b17ced10d210b73b69d45855330e2f7d04827af69758de2cb8cd3"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash
8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787282728402","kind":"published-quote","locale":"de","page":"brand:tomorrowio","quote":"Noch ohne nervige Werbung.","rating":4,"review_date":"2026-07-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=co.climacell.climacell","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.