Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“App ist übersichtlich und einfach einzustellen.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fff23513e2b47b893d4cc9cfcdee5f69fbf72da10f9e67b3bc10d3e24607dbaf
Signature (Ed25519, base64)
opKNI7lV0CL7YTcWDv/YuDKU2oZNP/cvlEEZiuXgtfa1Q3m513snNp3uJtd4aTp7scgQ+Gcexg+bR8LUJVTPDw==
Merkle root
5c4849a28e8624d6f6d3204e1f81a6b24f2188b6690e8b122801054617ca25d8
Merkle path
["fff1e188e8557284a13c434dcd33bec46b0694d3bd93b6b61249da135874f20c","4bd82d0f4b7e1d36e1696c11e0aefc154e156f76579126b7250a63166f06b510","3cab0649a4af5f54875d9d8acfff86767801426ada61deaaac2493e3e6e445c6","b033e05e2162d4346e942b5760bcb7febb9c7350358d5d0a6ef3b6e6c3b036b0","d4dba6073eeb24dc83d55bf3e0a11ab27a8b372ef05b3896d1f50f393b9f0428","1680ec57e42ab8041407e0e40037105e042b9c74b6021b4505a78cdb57054dd0","b965ce0fdcf7191aba53e7f87e37facd368bf3c0007ea22c0b78f75aed701b21","f1a852257c28f036dd24ef7991d23ac1366c765dadcce933a8e376f53d1dd9ca","c3195c32c4101efb17cb72526e0550d15b5da06a872ef9547a795829225e840c","db11b4aa49c10eef4ec79a0ad17aa97c8c14d837065d5951e22579e1d8e685f3","70f47681a8ae79c4338584783fe53fe7c0d49aa4285188d800ca28397e9f3863"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524617489 · entry 108e9186e8c5677ab139…
Expected log hash
2051fcd76f2ba790414bb1c15fd4d3d064889742ea46f8e55b5028f1f571c27b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787193158162","kind":"published-quote","locale":"de","page":"brand:foreca","quote":"App ist übersichtlich und einfach einzustellen.","rating":1,"review_date":"2026-08-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.foreca.android.weather","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5c4849a28e86…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.