Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Very good quality”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
06f145b65541d471b2aeb1157b8a10984c088884cfeda7f3b946e6cfc07d9704
Signature (Ed25519, base64)
yRvQ3Dj3lYy0P+yxJWB9aoZEJcRSnePXcC/4iO8JAKxWObIHQ6xyaDddkKX88mk/fc1/iKZVSU8Gmz0wGs6eCA==
Merkle root
4814209eff208716b4535c2b0fd0b03895bdf3189545e82450cb75591e4887da
Merkle path
["06f38af9393446a64ecce16f2c10942e38a0f4e10a6e2346acb7d35aca93ee80","b4dfcc813d888543bdb1d5af474a007b23c045dd6b5c3298ad6c4c389ce224a2","58c5fc870d8e20076076d7b8ccd7af40727f96982bd189bd69509ee0768366d8","7e8e6151ff8b542f6bbc364ba8d39f12f4ca9f0567738e9f484cec329d066928","8b9d65e9db80c420b87181d684fb980a74298b54569cf0a5c55eb8c5817a0bf3","98bd9e2b6e259189ecad032ed2a3d154906b39ca376825c702c2c5e879449ecb","aeaf772746eab3443acb42fc9d4721c0ac7768e96397d683b96714bc74345e28","82d9f39d5f8b6d8fc6960c2ec95617f91bb8deb86c1b65a333d0cccf34539a33","e76b9965177c6b5a451a2c579bb351f60aa108f31c56615c6f2cd0019b9eff7d","22ce68ece64bd39d16b0b0f942b76298f00d2e2b1981f6b011c0b91d3d26f5d2","694748f02b5ff0a65ec47736488587ed6fe852f21476c65c3f4e981efe9c2352","58fc450d8d3ac4da8ac9fcfc859184c101d266d6f35f27c84cc4966e3f248dc4","5ca41ffa95430097818b993a1ba310362a9e5fa81d44bfdc04fd6a5a86897658","4222d4cb0e3cb98443733ef8f53c14d869249278d4ea410003cf03e3a343c09c","12d9d8014c44524a8d93c0e0f1440a3071b98d9de55311024d7d505c5879a63c"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671265667 · entry 108e9186e8c5677af0ff…
Expected log hash
0d4aa038b3cd3d7cc8a3744c8157ddb93929116887b29b6be030d34102a7e419 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788234112368","kind":"published-quote","locale":"en","page":"theme:ifolor/quality/en","quote":"Very good quality","rating":5,"review_date":"2025-12-17","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4814209eff20…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.