Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Long delivery time”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0b9ded27a46c9fe6edd38fc3a2ed3e4bfe2c3832cf20a823d3a7437c160de538
Signature (Ed25519, base64)
6OTlRl9i/LXGWdOF1EtbqPfQ8AHyLkRivs5c5JfErVRzzajsEi49Rnm5EV9uKCZGE6fBcfjxXkCzi7S583VdDQ==
Merkle root
63f33b09117da0970eb8600025b5fa2d7e7e00ddcf017aa20e295a9534f00042
Merkle path
["0ba071b515c9c7783abb60389af322e9ce5c19f192d6441c335438563e8e6276","1110396a38fb1e08e61a1960ab9169d4b158744fb7a0bef13def5225a351e20f","55f1ddd19d98dcd20e38a9466e414f33bbcb54ea273e3f8d6d96879fe29be98c","298ae4fc1f341f912da2ce08f52c1c1fab281172add34ed9b693a7bc496b259f","40e1b156eb9b71d213d5563a34f20393d22bd566ef23ade5859ff3080d31d6ef","1532a5c594f6f1d08d909afe0cf8cf1b8fee16d266d432eab091d975142e3a3c","5de5873db379372c3e7825beaa3b3705d179e602bbb15741b79a9e007a583020","dfcc9392e7bac8204e5755aac152732285229e54b482fd1b09b8af117a887532","1a94769141a2200e62209b457f068d39f813ec3e79e8a2553895d6cb9248fbdd","9f743c19c1652043d6a4bdc93e45b63a154bb5c9928da01e8eebd3c0c84a6bd3","f86c5dc77957a08a06daa75ee277232e0cf14b56ec5790f01009a45a2e588ea6","b6b3adaeeb5a42f3b37fe188bee74fec075a723ef0ca5c307c4aadfcb00197be","84c7bd3f19ba36f96686b62ade37cb85dd249bb20b59c7904d96e752a6d2e54b","357962a4cf9779c36cbc56c995807411440193d54042982f5073ccdce365e919"]
Anchored
2026-08-13
Public log entry
search.sigstore.dev, log index 2445200928 · entry 108e9186e8c5677a5b73…
Expected log hash
8439a0923dbb2157239c901d672e66161871ae6604887ba3dbf2459629039cd4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786588346842","kind":"published-quote","locale":"en","page":"theme:pixum/delivery/en","quote":"Long delivery time","rating":3,"review_date":"2026-01-25","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (63f33b09117d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.