Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Can't stop this scammer from deducting money from my bank account.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2515345787

Proof data

Record hash (SHA-256)

0429a4b47b6ef2ec555004cd1eafe5c0ea552bd1a8acb9674c1ac76f047315fc

Signature (Ed25519, base64)

hAZNTRdqDcOsS0TnjBEmKHePlpH6B/9lKf3RigSRRhsPfWMMV32iBS+0khIejR8hkcBAM84Jy7uaNdGJ7akEAg==

Merkle root

e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465

Merkle path

["042c013d244e5e627ad189d844568db958c2bf8d4fb161533e1ab8a44c67ce7a","ff01c9429645cf479b782fbb09b6fc1a977fa97bcb9c22fa384352a867180e77","c178c2901204ada9ba7bd21c249e60fd10b86ed271f227b07a80ac1358dc211f","3cfc2d6cc5c59204ff651703fcc80017fdc7b2c34c87a1dd785f1051e8b5494f","2adac0b2c49f7afa80300c17f49e1b8a43ba4fa98dab86d93ef4566c25e6d12a","9fa5deb592555cfd66c35e2290956d5880b9d3bbdcafe5644a15999c135895e7","65d7608d29fa57c1774479f524e572bafc2c6d9b91477c38da279e0f2dcd835c","345d826beff3005414a5d00a46d1bc211afa6240a54ff687fde0790ae0c4a88d","9d8ab5e4807708288aa42a8c8bf65813eec145539f4c5dbaeff725a2130b75f5","0039f7c6d19b7d67a86de76fb1a3c000e5bac6e34a0848b676711e9e8efadf1b","860859838a37226ec54c0a29cbed7602833eb8452293f0fded88c28313836971","82c59a1f070110c8bc72c9d5838bf722a464300d8665e875d27340c85eefead5","40969aa912cd897f062ef7b007bf23221003273332528476c6c56656ab8df18f","c34fa5ec75d6e3462dddbe081b828d412a3a575b53cbb348f7047f6afbe95056","11a62e67a9d98d919358ca5b8855f911ccdc865f14b203213de31adc67657443"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…

Expected log hash

d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787140356347","kind":"published-quote","locale":"de","page":"brand:smallpdf","quote":"Can't stop this scammer from deducting money from my bank account.","rating":1,"review_date":"2026-06-28","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a40642906665431964d8c0d","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.