Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“no hidden payments, subscriptions, or other irrelevant stuff”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2871093963

Proof data

Record hash (SHA-256)

09aedbc56096b7fb06c8e7fff2650598d8a413cbf0938f031e4859196a924405

Signature (Ed25519, base64)

DOmF7fkksiMR9MminDK2Obc0tye1aveObDlUGyu/NTkHS1G4lrg2wCAsur36H5wPXSpEDkYGCO0p2vM00l9JAg==

Merkle root

10c793aeb45e0f89b9202290e8cd37afdaa93db762a28319e14e5d167b3b381e

Merkle path

["09af374fc885fd802a3ef0628db32818c96b8b42719faaa4fa51c1275f444d21","991e271b605d0155601d189a9362c231038d09595ae7a1ac08c089342a148237","78dc6107d3073a809448ee18551f1d9101ebe8a8cfba94059677efe05410daa9","92f68e31a95fe3abd60303a1adcefa69fd46ebde732e587856895ee86e020232","35fe31e573f16639bafe3d06040685492ddda62f9635b493f9b18a5caee7c413","8b514e8da50633f9e882c9b4f7203773aa5cf6c0cd74779a11371f8a1a6fb2ca","064c5c6120e69a55f9398a3eddf81981a2bcbca7bfd87558f34820af06f627f5","fd57bf33714a155a671bde5d4db1accd212c4fca5650308f538f040cfa022f7e","18967040796684fe55eb92a33c6f639f877d5aba7ca18e11ca50cfdbd7003c2f","32b3d4184fef28cd00554af5220eb8890b704f3eafefd39403844a4b4769eb54","e6c16b416c04f4036012675043ee28cb645b677a30c110b60c8d79fc5348a832","68e985c51622498c4262b6de05994f33143579e20c921ab9191a44c84b470cd4","0c6ff78d9a5bc48641d52eb32f3b328fc570098ea056714475cd5898d1d647f5","d4f621f60f75eda733b8341a621a17886ef25c603b2427ef52f7ad4e3a8ea7d6","86698da34df4e83c54914359e9a6440fbcb5c84f13163aaa7ad9fba21ade0277"]

Anchored

2026-09-17

Public log entry

search.sigstore.dev, log index 2871093963 · entry 108e9186e8c5677aaa83…

Expected log hash

2dc7fe816b6373997045fe2c089e9db0b321b7c653bfed462fbdb27b856b80a8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789531532649","kind":"published-quote","locale":"en","page":"comparison:smallpdf/en/cat-convert-pdf","quote":"no hidden payments, subscriptions, or other irrelevant stuff","rating":5,"review_date":"2026-08-28","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a9133c922cb937c8b01fb95","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (10c793aeb45e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.