Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“fast delivery”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
08aa9419abbe0165b7e1a2f6b5964afedf7a475e837033e55d89144affb60811
Signature (Ed25519, base64)
y7/142jj+UKY3X9j7H0TOVvlgfTslv2i+hLp0/Fg2N6P157X8sDMvhUlMngYJ06CKlHEO9fSSe1gdFya2oiWCA==
Merkle root
c280d9ed12ff4c0b3255dc7898b16f1930cd4119f42946bcb4cd68d076a2b332
Merkle path
["08aaafb3ef462f8034b33209eba573fc33d594df883d537e76cb281e9be3cf76","ca00e0be3b926d86de507dc5545e1c2bb851a1e523a54e2f6d1baa1e1090a9f0","bc6a4b69d8745c4dc57051f6254218759ffdbe149f0fc93fd0a0b2e361d6c2fe","5d8830e34c6270618967c4b8fde2280af0f5397ad46662463f1caf80506fc313","0877c5827ce00559beeca9f56f2ce452426e55eeb6ca46fbdb00fda660154599","b029bf78cb3fd815fd267bf74b6f3474dce24bc5aae9e851e5475e5b2a9492c5","3b8af383dc9e03f1d95043e1772a71df8e9a736849523960499f18861f3c4a26","cd949ae4d0666f77439a5575ff7e286ace162ebb8fa798dea82975229ba3eb68","0fbfa2cd53d1fc9066d54f696100cd68e389f56f928faf86e968d9f6e46384cb","ee99bb2c944053e5e3202c424693715472d9f3856d690632099bf9c386e24503","26081682736af8afbb9a54ecd987c5ea74516afbfe7909dd62784bc105ff7b50","472a46e5ff22ef13f95849371f5e56cbe4eff8ebf99e8a0d25beb8257d4ebede","420b89a5765bf5e1ee3ca525653a85d95f68d0a5f95e1e3aa883275c5f706eff","1bb9d77697b03c52c52f610920bf29cd71b9d55ec5c24ed66e499e51e9290526","318e458e36dfc92952cbf790d510c87679554507275d835c305b6eafec626494"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2682517241 · entry 108e9186e8c5677ae940…
Expected log hash
4dd627b405b5e14bbbc331be73be3f78a12bcfd7daf600ed87868080d5d2f664 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788316240490","kind":"published-quote","locale":"en","page":"theme:cewe/delivery/en","quote":"fast delivery","rating":5,"review_date":"2026-08-07","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c280d9ed12ff…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.