Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“best tool handles all and works fast”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2680856520

Proof data

Record hash (SHA-256)

099cec0f979efd15671bd590d5c95b12af9be3a418db6179fa93a52fabd50734

Signature (Ed25519, base64)

LhDFszL8lS/Q9K0V/B6OnllEqLNybWw8b5kSjb2LBomav/Gl/7EP3KGb64ewiC4geNZTIZUmkThmW64ICVYOBA==

Merkle root

e42defaa0a17e226699ea4a82dc9c6dd27c28085170ffe1d62d8c6a4c9215db9

Merkle path

["099efff18a7d4683cadaeb24d1f5050224ee6be74f4970e6e663caa3574085c9","db8ee70a775ec7816e8aec7af17769288bdbb7ca202a8b3829cc56c90d2a8c5e","8a82de31ebe4d297d4bae146896fd6e1a945e6f1f619b560588552ec0d4b20e6","cab798304c595e8615b4215ad6e36794c54bb849673e93ced2316f3595b6e0f5","d4006cb95230957a4d56c9e49c820b674b790177dfdf2c8ea4af8cf61f73a3f7","6986f017c673906eada590235515bc006d766d5b77ec667f5807aa73baab9a46","a4b0b09baf471c36bab0aad7cf7f87c1d963c01a27ba2efe9d69c3e3f4f91acd","e50148c2bfe8a3edd9766ed9fc8ee36da92d5de9c6cb50a59da45577d91f2d9c","a885c9fd7cfa5b4f22fce8807a9b8f6d19737a48d9478fda8c011365a4aac7ce","29e82282541d192437a4f6c358509015bdb38473d3a11f082d981053cb178063","39dea0caf015701cb503eb4e94059087d030d6df7160f0d8c08dd9cc53b44240","26322ecba042f86a8a3948f32fb985f61482003505576f985a5eec2ec4c81858","a723e3192c73ed0856ed765177b67dd95561b4a0d6d1c0b16f64f339be4f05a1","f9b10a6aa616ed717dd3cacc1714fe509709e95281fdde9fabb8c6943e906d5b","270a8fe791f18cfa20f43263c29329704ffea666703469cea18570c7ca1219e3"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2680856520 · entry 108e9186e8c5677adb25…

Expected log hash

356153ffa6072187539ea75dc6dfb23d03b74238aa8aa70cd6aa9a6a99e983d4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788298923475","kind":"published-quote","locale":"en","page":"theme:smallpdf/service/en","quote":"best tool handles all and works fast","rating":5,"review_date":"2026-08-08","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a77086459788bda49bbf504","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e42defaa0a17…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.