Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“That is simply not good enough; you can find such a code with two clicks on Google.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
034a0ace17c2861d418b3c551e895a43b7f3dbe32da244c5f1ab28f794e26643
Signature (Ed25519, base64)
GFffz7RiGrUi5OJOp5zeG0u6KHxYW6rj6uUFfOjLhjFVtEKBiFhfTRQ4An+H/Hw5bIjIXeUH2RYT0e6fSDyJBQ==
Merkle root
5281b854216b4e6bf9a4d9c1ef2bed9777ade9c29883f1d0f546437faa5e15d2
Merkle path
["0349ab970e1aa04635bf6db6bbc323069d53c99d674f552e51b14c96681d3440","0d58df34ca623cf82a933dd98c7f25856176d23b3d5d1cb3ce884b10c2597d89","1469cc3e0e975b62dc41712821467c094a9a92cab0595823ffd67df36c191952","16f6d2e31cd25f2c771bda131eb7df5823469a5b84d8579065cc7bdab8a44aee","1a3d70322daeadaf73b7bc0da02080078243506acaa1f6f34fca0e3fa0db890c","95c8d4d2cb98fd86cf1aa5281ac3935d44cd88f66dea516c30b66aeb0128fe36","730bcb0fed294a8fd6f948ed00f6d467ce5e1ee6e9a5b0c9a136bbeb6a6910a7","6891ab83eb814eb2cd3de62668b7052c531589013a433cbfc0adcda7d9ac783a","180c82837aeb464b04a818bdfef368bd994cdfcdba68a2965547ee5d25243783","b61a79ce1011ace54d8aa935c21a9a6f7f1d6f8cbf71ab7b80258ee8337b13ad","da5d4823df4c5c306936c556ea76fd5e08d888de36c068442385b351792c1da0","aa60331715a4760f0f363284fb54b33c3fc51349cd38dc377612197ee40acea0","d2789c0fe09629a41906406d8fe2985c294ae3218eaa35da0f43e8c1d654bd45","3f2e066b220d21f290fe4ee4e114e6992e62cbb35f6faaf0f86e02332f98dc0b","266f13136d3ad4d5b30a4dbd24c9af8bfcbe23d11b0188abcff5f3a43a71af37"]
Anchored
2026-08-24
Public log entry
search.sigstore.dev, log index 2579520646 · entry 108e9186e8c5677ac653…
Expected log hash
6c785387604f7a22a5b096fa3c6c8cb93055a92b2f2f24f3a0a42c9bae32debd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787540495725","kind":"published-quote","locale":"en","page":"theme:cewe/price/en","quote":"That is simply not good enough; you can find such a code with two clicks on Google.","rating":2,"review_date":"2026-07-30","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5281b854216b…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.