Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Fast, easy and most importantly, it is TOTALLY FREE”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
002c87d029f294ddc9f62ee8109efd44bcbe17b504e4f943f7955d0af0295f64
Signature (Ed25519, base64)
D6Tzik8y51trtccOJPcvZPj9UEQU0/Z2Cu0UscfRf6PFwpJ4BK4+v3rBThBN64z+uO89fSOVXF9RJUZGZlSuCg==
Merkle root
1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6
Merkle path
["003005ab4378ed1350b1fa5b0ae8177097619bb278d222fef5f68cfbb219e3ea","1ccc4b113a2168baf59e079f20e697f12077f2b08622cd5b089fd2d099cf0f88","45acc48d6accbf4c5e8ae18cb2ec5ac750059a0bd3789db33bba6e2392be4eaf","e548a7df8ecc9c59619e935ad18fa4836effde32bffbc82f943e17701af16385","5aab1be35b1f08c25324b7e249a80711935eaaaee61378986499059e00f136b5","8c8e67f80a61a677f600c8af1e9fc2515d897c7c93a5b9f4a18d0e135d16224f","543ed5f7bdc60e095011a7d2b203abddca06fad49f2a8e8e8f00f504e62f48c2","07e39220c39cc6ee27be9a4f31e20ecb9113ff1afc5005c8908eca3ca9a94c54","7c645f167856d78cea00d9911c7beb64f59ce04fe7f758ec4b04734512a2a5aa","916c8a0a9c81fda61af3499873a0900773e97cada7fb35c2fc2b6aa711401839","5ea9496e8cfeb8b81ad7d4b9eb86263db05464540b11c9362068eaa7c710251d","61b4a662f53cd70a1d757ee9bc56bb78b4fd6673936037a47cf8f48b7bb4419f","9428e24b047bb9d4ac05b5ab6de36e249e544865747a9fa357ea862bb3060151","c4a4d8b2a4d8c0bfbebb4916fd7e139c5aa71a08248affd318e33dfcfb90fbec","b39bfa02188a075f3ffabe31b61efbaa34ef7a32306f491e668efcd33d84ef4b"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…
Expected log hash
3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791338675665","kind":"published-quote","locale":"en","page":"brand:smallpdf","quote":"Fast, easy and most importantly, it is TOTALLY FREE","rating":5,"review_date":"2026-08-07","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a7601385753e46372ea42fe","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.