Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“J'ai une entreprise à gérer, pas une panne à surveiller.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2682369737

Proof data

Record hash (SHA-256)

060cb61d0b00dac72576469bc059c432a56a0842d4ad1eb472faf8cb35d4f6a4

Signature (Ed25519, base64)

8aKloVqi3yn6Q4RdTQnFbc9oBe6Lc8Dfv6PgQgrUQQ/fQ7fgBb+Ta7D1BgmI0JCVUKqD3pkLysVkMJeZv7gTDw==

Merkle root

596f968cccc56e8e000b63b9dd30489d92d97de49657c3c152b38018ff4fca5c

Merkle path

["060c44776d2c82efa6b8ed49e1a81646e52c74b7326e996b22aa246d584436ef","27881b6817e03bce707e2e6e6a8dfc415880420e4052a363ae599460abebab5f","619f2525ab14e3afb886dd2ac343613afe1439d36bf897970e07cf63c460a75a","f338a09ea6d68de0008c1b1d6d83b8d99c9e0c4db2a4d960e21d1dbd5d34f0c0","bbe52453533d210bfe5db37f44e6ae22839e080c4f22983e528e438814f15844","92df2e263d1d816cce408fb13f58765551b4fff85faedbb1cb8f70de88a09da7","2dfa6c011811989084c643157b29907e129e94e1b83c90d799b06b43162c8991","d58defa798e3c790f19c20b5ebf4cd03cde6151af233ede8feed0411da54cb4f","ac3ce66bccd88dbdea3d8e09a6a5a7358e783f40201cca7361d3ae6e04e8d2e1","69cf08bc7d8bdaaa3ad7c7e6642007d8d96125fa9773504a6ae117a8ccc96d90","a4c1f64acc073d33f0f6aa6b94e5c00c2c63cd553e121e3de38014ead3b0dee5","a2e63b38a500e0e747fa2ee593ce640601b396a882812dccd45f6e723859d791","8e868d52b37c0ca851c758cff6792552e789a45811741cd2ab35462dd346c599","f34a99bc2eb0f4358a151b675878bdf5ad21628e2f02e9070ad22d026160a11f","1def65a8c7022796c92bf89e3ba0ded5702ff898262447be3bcca696fe961465"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2682369737 · entry 108e9186e8c5677a1ae2…

Expected log hash

21add9acab3ef5374d6a20f71e18493c941f530ac81d350c83b699eab93536cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788315101182","kind":"published-quote","locale":"fr","page":"brand:infomaniak","quote":"J'ai une entreprise à gérer, pas une panne à surveiller.","rating":1,"review_date":"2026-07-17","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a59547c9b530eb9b53f2d3a","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (596f968cccc5…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.