Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“application simple”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0353445e5f7d20ff7ae0bd809fea0b8d84d1dfb4851513ce0c3ab4fd536cdc55
Signature (Ed25519, base64)
uQ+6CE1kLD4gErRUglpUbgXXUR83hfQSukDCvsQOz7c3HY9bvJAxLAQk+0IdQLoS+x5Tt73QOci/BfL1asl6Bg==
Merkle root
c481d62412848235567fda063ff4784e8e49df41ad8b5c570de24ba396415d22
Merkle path
["034eb7b4b56710b9a54fcd58a782728ced59e8d23a5433fee49f7d5bf908225a","80edc79aa2191609d9d02f71f8f85383eed3467c4b86288402c1c18062d7b20c","1a37027faac032c2c8961f7b6c64bc0984ddb79a76a194d0be86b9d88bfc5187","83df412fb53d6db99bd146be2aea94d6a7484e5ca58aec728dc22673645570da","1224cc8ae4ba172983e3d9415a6dda987b3a254aeedce8396a8dd066f9674539","7ca589a30d4cdeb817c8277a988fb24d515d9eba27b08df469df6a985ba49b5d","2961544f7a6cafe72dcc110a624e38806f0fd7bd810e7fdb86f7540d1d252ee6","1aef2f6b2ddf22fd9d80e88160904505d695da7018f85e9d794a32b9d0d3ee18","831c7833c15faf2af60d184f63902e165497b4bb27206b9975423e820b7e592f","c40f017a221b69b05bf95e5ce3919ec2676b831c6309fb8ad3d172a7faea5d28","05ef8f764d5e2e1d337d2625ac3c0827f82e8574a89c33de74187101fc420dc3","1e420c13b7798af08501fbe6365ddc5b44e5ea7ed3d656d15db245d747c77a23","818f0135095488afaa32256706f222f09138af7de4410ea79d618f621eaf5cb2","ed99a4b837bfc052822e7d0dbdd9c56431a87e8600550f5deaf9f7068616c82e","0cbfc145d581a4c4b7198ff8f397c34cb4ba6263e9e9892372f878302426dbe6"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124493015 · entry 108e9186e8c5677aee70…
Expected log hash
0056b042c00529af1248b70a0a2fbed761990dd7841ea722369c29a2685ea6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791350987184","kind":"published-quote","locale":"fr","page":"brand:sumup","quote":"application simple","rating":5,"review_date":"2026-10-06","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6ac506291c06200be3f0ce2b","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c481d6241284…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.