Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the payment methods”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2622459130

Proof data

Record hash (SHA-256)

09443bc74805ced942bdc4200ba248cec667f154de0bdd84c4ef508e542872f4

Signature (Ed25519, base64)

UPwYsmWD8CPnJyleQRMuBfuJTjjhDuCxp+wwJxlNa2turo4umtxI3dXVcQUvUX01juxrcDubaWebBWjhFutUCg==

Merkle root

79bd9ff30206cd9f2f0827e8e360304e72338e2a6538208f6a795ac0d27be440

Merkle path

["09429e2a6f7fda9224fa77d428b0792f7f993298eab4fad69af2c5b0695c2142","9ad4163934c2b1dda832aa46541019dc04d0b000da96c4f5fbe68953461927e5","a063835858d08b6d2074bb67ea4c5510e08796832413939281a700f32eef327b","65302239f4d6f0c664427de73aad99a0dad5418e8394ac113f5ddefc65d93761","a8c8db0ad4667d653f3c3b6080e13c1a6f67507d3aa2a98b0203ae1dd0e8583a","7503cf817012835cd94d7365ecac552261f2ed6bab2dadf1ab5be9bedeedfe66","b586073e7b7661b092c286f9fefc74bee7b491bdacbd2c0441ad31890326837d","d4ba296f1c9001da698c9789a53e9b922ca38c26ecb30f63c597f588a86c0907","07f2823acab42f6f12a9fb416a8970e151033b122d8e12926cc206700ccebc8e","24772dcc9501aa0cf88b045bce74ad7074fb6770d0481e46344a6478765784f3","2e8df81630c8e1e50c781be59495eaa44afc71e72f4ae7699829be15542526e1","7acad3c67c891824f9b5dda51b63df0ebeddf68cc289d09bf80bbb1f6db52c3b","e31b3b80ffbe5d0f34926e33a057ac1ad2cacbee2c3c16fda9c5e9f8f02c8f71","9517b19f1f7a37f81f00e84018a6e59ff930d698129abc0e98c33f230cd4311a","02039d4391222bc60d104b52b52d2b392a39e81902cffad1cff65a2d43c0dfb0"]

Anchored

2026-08-28

Public log entry

search.sigstore.dev, log index 2622459130 · entry 108e9186e8c5677ae09d…

Expected log hash

3805ca9329ec46d2400d87d224f109e9431be016decc34dcb30057abc3255069 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787897541116","kind":"published-quote","locale":"en","page":"theme:smallpdf/billing/en","quote":"the payment methods","rating":5,"review_date":"2026-06-27","source":"Capterra","source_url":"https://www.capterra.com/p/172606/Smallpdf/reviews/","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (79bd9ff30206…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.