Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I wouldn't recommend the Bexio API if you need a fine-grained e-invoicing integration with your software solution.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
05b647116b4235941bb701486b79c555f52f3452425c8eea274d26f626d199c4
Signature (Ed25519, base64)
YeVqhbB6hbME4L0b5x1kEZCXg1BcEI/ijR03ft0lckZSPBjuBY1fMGZMrq6IKzo/Eomy2rzcnmoiaO16+jtzCg==
Merkle root
dae11b7f399fa27d7e91aa4463415971ac3f4413815a3c608e4b798805e78c60
Merkle path
["05b58b0dcd1341add3a336424a4d3028f11ba989339670eb5bfe65db2494a2bf","427b5061961553213d577566c7c07a5504c008ea0f0cec9d24892de7aeaf5690","ce0b6dc509d2856112ae5dcff80f6a9398c12ecbd4eae8166a971dc631c9ca7a","490c7bd4e88cc650a85a2161cb1901c6e1e7540f6122165c8366a2e85a4aa9a6","c912acfc3f3520c5875672934996374a617614502755dae05ac451d73702dec7","5ac4c530fe7f741ad6746728451694e36f4c39a555649849cdb4fa4175275369","07312ca992cc29544e108243c998468f9fec3787d5d0cb0245d3bddcac6b5d64","1419693e39a6152269fca7bdd026f93301cfc673d0ca357154f8d9995734a58f","a8f0ae6effbcac8aa6b77d1dc76e3da70654205482bbea1d7b4ce575da36b2d6","7a21aa46be716d54bc49660fb15f848c07f48f6e82c2c89fc537d314f72271a6","50d046ae1ed8212b4ea40ba28cf9150f42577a33b8131d68e7ca47560a2ce5a1","0716d20b2d336af648f125e1c2c654fd2223c3dde403611772680fb1b6a17314","14af96598cf9d6cb016b0fed730fb6c3e41450ab1c3ebbb7f845ad928e8a42fb","29fee1ee29171f2526142193c918f4d151680a806133c34179179c2fe722d806","6771b856bc54b9b41031b35ff7640ad54c5be8f800e1967d73d242437a9508b8"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3161668256 · entry 108e9186e8c5677a744e…
Expected log hash
dbaeb9745833827bd692133822ce98bad4dbbf6d52d00fcfdadfb4c533d214a6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791537031439","kind":"published-quote","locale":"de","page":"brand:bexio","quote":"I wouldn't recommend the Bexio API if you need a fine-grained e-invoicing integration with your software solution.","rating":1,"review_date":"2025-04-25","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/680abc759201fb12d9c9dad1","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dae11b7f399f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.