Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Great little site that allows you to use lots of cool little tools”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0a34d2538a8e192589573c0a27acb4214cffead89cb54b9da7d6a42e5604c9ed
Signature (Ed25519, base64)
zhQbuUtgdrlJG+5MNEgkVOSOsUh2QN2G36IeEw8oJquM8+kpP48fm4mv14i9jLxgl9C8ty8T1GXR3VWkNqkpDw==
Merkle root
7c31845ea005068c52611e47ff2778bff3790bf9c71538767447b45fe79322da
Merkle path
["0a3625d6508ab20db5939dc0d165a33712d7dc927124e22e9e13279315de7129","40ef4d9db1f59d9fbba5573a7d9915f4a3868f4da393b739119a77c209f086db","dff19d3e96bfeee83f6ea6385d9f949c51d9570acfedfc730634f42a62671d38","20cf48c57771319798b676986ee635f2dd22ce0bedb7f0caf1d7ffd56e3be6e4","edb835d895d817ebc49554d7f3dc025f89a11b4ea8b9d77e2b15c79dd3f59c3d","7e2fd72919e5dae3752ba2df4f858ac1dae029f67a762b23e194f4496c1fa4f8","b3397cefdb0b4807dbda3c6cbb7cde42de0b0f7655fccb36956636dc2b57b386","313cd9a325f4a4c8e0e320a57d88244c64e251610b8676044ca0db43a205ab55","4be92aa2412dea7b04e3d2f43664273027a86a4d69dcc48046a9c988763c0db3","112798e60cbe649360bf0e691d77f14be3e25c5d9e456f9b064d266ef78976e9","d725721ef4e46a74ffa33a5b3eaf5461c6d90eaf7c1f1f95e9c66dcb49eb98e3","6ceae28d9d9991c7f0978d9583675f513d5a8b980f19419645347989922bda23","de406c010b9d09d7f74176c9d423f8d72b745ac400e2c0cfcdb434d0af8fcade","e49018058753e3439518d8ba4c827c0b343729e39fb424281e6808f61fcc629a","4f862010adf0fcb97b6b2b8112f782a485805bae9f9783a7b39739616b9b62e0"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657817117 · entry 108e9186e8c5677ad3ca…
Expected log hash
0666b5f97f085fdfc4cedfba58ac7e76857cdc9faa5a1032ef597cdb93024c5a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788148095319","kind":"published-quote","locale":"en","page":"brand:smallpdf","quote":"Great little site that allows you to use lots of cool little tools","rating":5,"review_date":"2026-08-24","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a8c9e837348d17e5b1c0081","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7c31845ea005…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.