Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Finally a site that actually converted a small file for free”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2612470999

Proof data

Record hash (SHA-256)

0bfa6ababb3ee26643adcabfa0ab8026163bd327680a3f0a91b7e3a5890bd063

Signature (Ed25519, base64)

aha+NwoWDDy89kW2Tt1PZlhtMaIeuUxsQYaldqkbmjdJOblSYaQxnRl5kxI02vv9RqzGzWOHD+WN58NjdO5FCw==

Merkle root

e1d85175eb3de20460be7478d6cbaae36a1b9ffb3bb4959306f8da40e58cdc53

Merkle path

["0bfa976d4a178a31d11746f3b622761ac564556cf34af6262697218004dfab4a","2ad23c83466c4559cc3192346e670ad22063cfc05ef990bdf11a68103b721fed","f4a9b12ba8f5a3ad67b64c6e7762baad56346520ab9348b0131dc894e85f60c0","912be91f07a786a7c901e985266da66d348342eb42bfd1e457a7a282936ef71d","c5d452f58fa64d929f6b33e3af44245fa7942fdd5958eaa62bae1f8c9d6a048e","1b5b8cb827733262a323b3a7bc99a5525176cdd27839e22fc1f7001105bcbdbb","33bfe2e635fe14df9b2dfdd06bba0ad3d52ae234a03f16b97eb905a91f9de962","bd5e2fd72a797577d4c180a27799c256b7d83c01576ec57679c22055c6ea0711","b27070c434ec4629934ed6571fa5d07f9fd8d034f629bedd7776cd913992bdd9","05d58639c723a2412297588e4e8d13d210f5bac1f4b44a500cd62d7d78f25ff2","ef90d7b2b15e2c013860ab2bedbd25211fa2a40f8e6bce6159d67b096d3e8b72","6b15bdaabbafcb8727c139ed3e055f6a1191e894da99242e3d2b5e421a64fc5b","9ca72d0c4bcd0994b86773e4ba6c3b971bc9ef769c49c764975054df4ee33b9d","d2259499a6a15953fa73bcc6db9325f819dce8e785b0f957fb07e2831cb6c331","696d05a8fe8f7b7737f5171e0d56574eb9fcc6fbb6486fca2bc89866a85768bb"]

Anchored

2026-08-27

Public log entry

search.sigstore.dev, log index 2612470999 · entry 108e9186e8c5677a32d0…

Expected log hash

320f5e8c7b6a05058b811d24c7cc7229f73f49082335118037aee793eecb309d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787800750172","kind":"published-quote","locale":"en","page":"theme:smallpdf/ordering/en","quote":"Finally a site that actually converted a small file for free","rating":5,"review_date":"2026-07-21","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a5f3bdf4b33aff8732c40e2","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e1d85175eb3d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.