Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“cancelling a subscription can be a pain in the ass with this shady platform”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2682068569

Proof data

Record hash (SHA-256)

0af0780948fc1e9dd3cdf60ec7a2bcd48cb5d80c491dcd8699357a2acb2e4e78

Signature (Ed25519, base64)

AcgwL9EieHAyIwddaPDMaW1J/yNkiGdU3R/RoTl3kHmbpP32Si8zNgJNynvIyYe7KFutRsf3ugtwtmj7JWAkAA==

Merkle root

58152eafbd1e17c07a57fc51092eabce1ceae3f7d7e40817611cb7b6380c0f72

Merkle path

["0aef5c01bafa4b4b44c78c6fb719ceaf0f59c63eba88f597c7ec51671b4efe9c","c3598d34c54e73efdb5c0a1edcdae94fb3c0ebc319cee94e52f9ee43aae9be76","94ed645884a1d62caf398f6b07f6b15745aedcd7c2a23b41343cd6181d522654","283141ed63c487473d2f24cd8138a72611f158d57081801cd79bd2b67528dce9","d24498be7d08d51f256ac5a831894d5ab7ed3015695e901589bb3befa09289df","90caaf8ac72965d0d322b7fa165d5d3d4d0165c7cc6de4af701202995f41f814","78a8dcc5a34bbb102be8464a7f23c235dbae336a00057e1b09eda285f63ce82f","744bf824be302e583ec96e9b41437feed8c2d92a8c2abeb4b3ed531585271d0c","4364e5195321191411eae8785db0156d5a3f96460487a0b3e519aabf63458e22","940e389c017e6eed9161c63e9db27e8509e032ff8b0160fddd272da6be216706","81b3e3803a5f656393b1ea5e2da78a83746b894806b372ab494308182f520c5b","8c13fb05753408efea894d3eaa22fa4f673f39c7b172f7a77e664ce000c21263","bb462c3d38ad21a9cef76adcdb883e387603ce6deb030828cc61aed6c2537cf9","b602feeba516bbe712ba8ff0806ba81f2f58a4affca9619585625802efae22a0","cb20bc482ab55e20ccb32de1de1fec1b4f895ce9b04bd36ade3cca9f53182999"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2682068569 · entry 108e9186e8c5677a4c96…

Expected log hash

260c49803fe8c7d22d3480836633b40387adafb10154040fa1604350d604e93d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788312710194","kind":"published-quote","locale":"en","page":"theme:proton/billing/en","quote":"cancelling a subscription can be a pain in the ass with this shady platform","rating":1,"review_date":"2026-08-10","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a79fdb35d21d3393f683027","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (58152eafbd1e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.