Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It's a really good converter!”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3161668256

Proof data

Record hash (SHA-256)

0198400f16ea5ddb35e390b58815c91868871a4150630710e3c141a1206133a4

Signature (Ed25519, base64)

qXUV8Lcrdwxz6I+dJEsnCdgdhT2lc/5VZzfafY14zUYmZKFfKDnF2VniG6iTu3+2aArAdY5OaJyi8hvR7R2FAw==

Merkle root

dae11b7f399fa27d7e91aa4463415971ac3f4413815a3c608e4b798805e78c60

Merkle path

["019463328aadec07235d32926edace450a144d20aa57c813fd031c1179a59860","e8176260c11e0d4f35b9da57062e694adae54d9509304882bc9f582216ca9363","9872314f8addeaf1c7f1e70109dae4b8d4a14bef83204bccb6c00652600dae37","c229e4d5ed7b5627cc4140b8885371cc907b90ca6ccafa4be20ea0368ac449a1","c4a4f7c2d60be034c73b3ed4c9b78fa6d958aaf805a71dcaacc72aa2e438cdff","93d8ae3c1ff4096adfab768b0065a35d1969207e89eaadfc3e5030a4d660e49b","5616691fb1081a969170819519043a12daf915c5b2e76286a51e30a1c2e73d54","cde8f80d8b9735c024f171089fd097347e5f1887e9b6ba3878c7e27ee072512d","92f5c63c45d154427bd74f0a187cfce193773624ab6bd284df9d59605a75f901","7a21aa46be716d54bc49660fb15f848c07f48f6e82c2c89fc537d314f72271a6","50d046ae1ed8212b4ea40ba28cf9150f42577a33b8131d68e7ca47560a2ce5a1","0716d20b2d336af648f125e1c2c654fd2223c3dde403611772680fb1b6a17314","14af96598cf9d6cb016b0fed730fb6c3e41450ab1c3ebbb7f845ad928e8a42fb","29fee1ee29171f2526142193c918f4d151680a806133c34179179c2fe722d806","6771b856bc54b9b41031b35ff7640ad54c5be8f800e1967d73d242437a9508b8"]

Anchored

2026-10-09

Public log entry

search.sigstore.dev, log index 3161668256 · entry 108e9186e8c5677a744e…

Expected log hash

dbaeb9745833827bd692133822ce98bad4dbbf6d52d00fcfdadfb4c533d214a6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791537031439","kind":"published-quote","locale":"en","page":"brand:smallpdf","quote":"It's a really good converter!","rating":5,"review_date":"2026-08-08","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a777d5f585187164f72250d","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dae11b7f399f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.