Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“With Cyberghost VPN the hackers are shut down.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3239939960

Proof data

Record hash (SHA-256)

0fb9679421df6885664f5808e97d11f04caec2b71247ec62b70985d44dd8d4a0

Signature (Ed25519, base64)

jWzBGlgcnlCfQrh8lPi3VoW4dVpjRe3iVvBeaGYSLzjKnYv98zaYNo1avwS0+HodBlZyfqEr0aogbjWTvIR2AQ==

Merkle root

954962254ff2eae9503796c02bd08deefa3a5722e4ac0b3981007e2b9ddd84c7

Merkle path

["0fbb18d5d053123b81c844819064eda4822bb2c465c701d4693262eba821beea","d10dd913380747cc8a2dcaef34f0af0fa8b68d4f6040aa722c2c6bbaa6df461b","2847364194a2e72cf103d0ecd8db268720dee2f39daf15c9b3c528841b1eef98","fea975871cb5bef03b29e08b4e53c64daa246927df581a5837645ec921427bb5","97ae2a5cc6046d304a8636f56bfcf536e7b93b69fa1b0699dfcf5cf89dfe387f","b64f47bd5be97cacbab28265143863d3be1237a6044a4a2fc4c24f2b0d0be9d5","14ec0e2b30fc71d585c0bb29820f60422ddfbdee569d1b4135dffd294a57f04f","5110a6394e1cf5f521e7739e0d9897c906c2c5407d03750f9c80e034e4522eaa","541153a0f548cfd6fbf2fa9c5866de2827b6789b74043e083df9f76036e52a9f","873a5fc80ee5b1be34dd5bc63b4383fc1df58e58069b1615fa2265187a379a79","ae0d02eb4672b68d3bd901c75d5395c5aa8f70e1034007ed320cfbd88eab7b1b","fde62d346ca93fe6ab586e87195f181c2c9b2ffa2c14b8bfe557af9f131263eb","07b2ba787804bc9fbb84c73bed76b7f65ff1b8c1694261a8264cf5f3209f315a","e7bbbee54f729cc449b73bfdd383c96b7b180e618c270037b5697f1fcc75f254"]

Anchored

2026-10-13

Public log entry

search.sigstore.dev, log index 3239939960 · entry 108e9186e8c5677a0082…

Expected log hash

28fd9464b857a07e61931e67235e692cb8af33d7541a60ca163756a54a64e9c2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791859824762","kind":"published-quote","locale":"en","page":"brand:cyberghost","quote":"With Cyberghost VPN the hackers are shut down.","rating":5,"review_date":"2026-10-08","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6ac6c7216c3ad518503a8203","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (954962254ff2…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.