Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I only found out about the renewal the day the invoice was issued.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2582684999

Proof data

Record hash (SHA-256)

068e264c10b49820e11480bb339982bda1140ad7d6754c44d45d167092dc1716

Signature (Ed25519, base64)

Us1UFjfoY+iNIwj5lc+4bAkoR9EFltFcBiZ1uv2p1ZQf1Fz1Dsym7ase72tM0xG3XKixel2hPFQvFOUCy4NfBA==

Merkle root

dd24e9f4e2c157def3e88a505d0f69726bf8aab26b1f5c4272da69b916c6842d

Merkle path

["068e04257b8d65ef3eac3434b629e90263d11571b0c9e2ae8b391e13e1c79fdf","05e77268ad34ef99c66729b34bcbe48543c1a28b6ea23b0c967935be2f5382f7","760b5e8ed524bde444ab00dc26cd0f02acc6b9a170e0394de8f13d40c72edc68","1694973600d47e52fd82e704fc2b947c9ec7540222d878e3275c52ac29eb897d","b052c4f6d9ccbc08ca010b6ee29a2c80949dee1ec295e198e5260ef32de21d14","a256278f2cbcda7f8a506ca409f4011e459246a4d5caaee4c80823660ac2a1ee","c901d5b6ba9bc240544d6a6f6d1cc776655c06f059b066e8f62dec9651f0f2af","52fd5250cfeef3deaec2f730dae037b0eade6e641c626387bc80b8110326f98d","a81b138328f595745c3616b8c7033b17493c6a135d77b1c31342564cac7b16de","f6cbfbb5bc604549521bd1adf7719286670f32fd5fe4aac59e6373fb4f1f3636","6d0be9f8f3086c3ca5ad7c4a7436dde2922c85cbdaefdf286bd8d8a7850295e3","f55d259140b1887f40efd36dc62d4702f641032856993f66621d17ae5fdbb64c","7e11d89f2ffe47873f06394ae6eb73c488c18861ee2d0ec6b2a058fa7259ff17","dd6255aaf7c8114bddc5f1e003a8869fdce442eab7e68a185991db8a5dfcbeca","3dd0df3aa4d54a1f18105ae8426c289b2385d33e7b5c455288c08274c2c3ddf0"]

Anchored

2026-08-25

Public log entry

search.sigstore.dev, log index 2582684999 · entry 108e9186e8c5677a2981…

Expected log hash

2b8ebe4eba52e1c2223ead6031d4eeeb67d9ae021114f03e62b1ecdd41675bcd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787631865749","kind":"published-quote","locale":"en","page":"theme:sevdesk/billing/en","quote":"I only found out about the renewal the day the invoice was issued.","rating":1,"review_date":"2026-03-03","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/69a6b41948a8f0f2190ac6b7","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dd24e9f4e2c1…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.