Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“funktioniert nicht”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ffa42ad536f15f0b0d2c9a9a88e86c81c279850363ebb356ef83381f4d675de3
Signature (Ed25519, base64)
Ia6Zb6pcSh10612K7QiPI7ddZwps2HBmZIJWYFDLcAgNCAeuu3mrQVoUh6WA08A2irJcVwQEj5lxN8gg18kQBQ==
Merkle root
681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path
["ffa3e190d144fba7400ee77783683ba20852c838467e46c7f3442a64ea976d73","734d49d5959ef857a5430522d08ca6aa769d15513a8a229e8cde506eecc05232","6f30f8d406fc4edf79cd0fad9361da7f3ba0b7849e6957acdbdfa643fc4cd66a","9bf0fe441499aa69631595c2e2b4b1fa6c91e76ebf8f646cfaeda0a6f41f2124","8ddfdfb83bbfdc4c9db575702e45681375c09debe35ee1feab4f39962b9ecdb8","e02b9b3a44659b2f84933f37ae197137c27db7fff5d0cd8dda4f078aecffea8c","9aaeb4b0f8508bacaf1fcf489424acfd833011fc5f466cf921a3bb72ddf72a1a","6a9f159643de763560bdc1c836539b6555cf08f51cfaba7b030d7e2e51e6f4c9","e054afc74577ca0aa5e7b52a63f4e70bd88a2709271dfe3ae5f3639376eb4006","339dae50e33d50aa0cd1dc447432aefad2a6e04bc149cea692cdd6f203acc133","0931601ab88b17ced10d210b73b69d45855330e2f7d04827af69758de2cb8cd3"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash
8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787282728402","kind":"published-quote","locale":"de","page":"brand:acrobat","quote":"funktioniert nicht","rating":1,"review_date":"2026-08-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.