Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Most pleased with the product and ease of use”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3247835674

Proof data

Record hash (SHA-256)

13311cf83ac4452211fd60bf8b496b71fdb2f4ba5e8c28605274257eef4ed0a7

Signature (Ed25519, base64)

aJk5sM86ZtxON2RtueZA6A4T6tkGYGffAQlAl6muF7tmw20VBQ1itF2pv7EkvpgeQ7YVz8ohR510YJsAh+giDA==

Merkle root

8af5f2f3f65c47a75dcdddbf363e3e76b22d37f4e953d150fcfa3e84bb04dba5

Merkle path

["1339711f0ce17a88de2ec343da0677992abe6ecdf4be105f031f3c54ae551b30","f717e7ca012e11d09d48d8a055ce243548f0480897357fb95f679aceece3ffae","e919ff8b69cfbc62f904fc567f9b9d985918776e2ea3cfa969e647f19c9a48ca","ba2b3885ca8d34b67a116566d834e21914cbc6246872d7f59596d672d22782fb","be896568801a4d664ef3c8fa7221f11c75f5b0532ca36f5c869e4d4c095a3906","ffeee255cfa1952e0124b8290e7f7138a2a8d1bbb8d80144eb14c5a815c7e694","4d35597fd709671c1359c84628a2eadda34e6fe0be24e0233ab2755347674408","cb1c99f9cc0fcfa11a53d011e620079503c4481c70d786c4ed9fe1ce744a56b3","e799c637030b27f1b6002ed2f4b53292b780c4bf6981407c8ebf85f0dab64376","03d5115f0818bddd020e121e99b66d8f76eaa097fdc69c5b9859e37bf20cea57","5b6bf80b3005705f51dc7da6c03522d0a90ff1a4add2493eec66879a0621f813","69e0b278fde36472d775b547f81c80ab6a46676326bfbd973817b55dc3255d09","2df4d836b73633f71fa96faafac3d9d32f00951d180b99885afa9511763f7b1f","2212eb5ff51e97198ac2cd6542275dfcf712b9be9a8fab294a9bf844689bcee1"]

Anchored

2026-10-14

Public log entry

search.sigstore.dev, log index 3247835674 · entry 108e9186e8c5677afded…

Expected log hash

306cff230c51a4aeee6711c8f2603eb2af6985e8dc9f5dc959efafe3398b8caf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791944613264","kind":"published-quote","locale":"en","page":"brand:nordvpn","quote":"Most pleased with the product and ease of use","rating":4,"review_date":"2026-09-01","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a9600d4e86a8b378626f67c","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8af5f2f3f65c…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.