Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“TONS of features.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2579644936

Proof data

Record hash (SHA-256)

051aa291c495ee12ad22f8c99ab39870d0d1ba20d5ae3327aae95342814f2530

Signature (Ed25519, base64)

km0LL01KO0QBfT6hvFUhK73Hy1CDCr0OEVSYBTZ6yZYKqWmZRYh2XgbZyBhtwhJxKPjDsStG9tkxtiRjkZ3sDg==

Merkle root

c768716b2cb21aabc39de506951f775443418285e2c5eda072e3b3c2d945945c

Merkle path

["051a60f90e8453cd4809bc780f8e1a8c55f4ceae3160da48992fae9a2f286220","201b14e0f4289c53dadae0b255a44632cb04d89676fc4ffc6cb6908beec50be8","84e56e09fea3c897e676de04eeb3a2f9bcce93442e3a03b4e172c0bdc0046c57","9f2437181428d07cd14a77951c75d85570416087a0443c357f80a814d97214a6","ab82b6e2b867600b8277cf8bab89c4145cbe10b3447d720e836ffb8e67ef6e21","735c9aad7d01724cc9196d2e930a4d871809dbdb0b69aef0f9d3cd310742d7bc","9102b88bf618ffba99770cc0179a4eef56304b20ddbf4dc9ca71be57e18c1e7a","26981c3786e09c6fc383450dcd74dfdd2a37a09bfd099ba08b87c9050f5e5f9c","dd9f46cb11eb42e81913f1f76a5b52c28b128cc268b0bb9f8846f513828bfcce","11ef65badc2b2c546e7ea885aae6cf4924f24e71a582a12873562803d52f2f3f","21dceb876cbe59a71a9bdd1b75264994db32860fb2d37844c2f478d1c57d32f1","2040ad8bb83c34fc495eeb8c9f81caf04fd90dd5129397bcf00a3351408f61cc","38e74f19a86a1311a4dbfb6ff75312ce32e1ae47f608a45fe54b6162c0fae8f4","58ccafd37278be2b9508db439c14e85a319c2716b397eaff7c959a5020ac606e","4c61c84fffc3f3248d19b221d821cc3f0e04d1cfb4151bcd103cb5959dfdd5ed"]

Anchored

2026-08-24

Public log entry

search.sigstore.dev, log index 2579644936 · entry 108e9186e8c5677aee79…

Expected log hash

3a9c8e6bb3b2990f2171448c5468a63b9d6f8bed98ee1b72cd7d6f73b4663243 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787545182186","kind":"published-quote","locale":"en","page":"brand:smallpdf","quote":"TONS of features.","rating":5,"review_date":"2026-06-09","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a2807e20de66dfd875556e2","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c768716b2cb2…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.