Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Fast delivery”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0c2d87e4e10e80d5bda4f4bbd1c3d6fa82a258f90b36dc9b4ac069236e675b0e
Signature (Ed25519, base64)
2FgaX5YForUKMKF5tv+qbW636m6hCxN2XokZkaIRW88SK6GknEU88M457+tSywL77bYz0iU3ppDsFLOhN55NCA==
Merkle root
897094661611c7f6f667565ccf24b086fe433f50853a89527920398c9b990be6
Merkle path
["0c2a5b326daa27f1c9e42bd3d0db4e43d6ab47e6136fec0ce7f99ed35ac4a138","a85c6ed14363d0d408b0d8661c6856ddddb51f333cd80d2d513ebabe6f02559f","024776d6c89bfc2032b1e405d1716d7ecf6fe708516d7a788970079032bdef7d","67e76ddbce2c9219a6628701176a40d99153143c08c75270f84d45cf4bf2b2fb","5efca8e3afa4b6f854b87ff66d444e78e331c108992f147bdc5691cae2f3ca25","de8151f553c287c03e0c241e3db5dc5c24754a00dbf8e814191ffabface6c5e5","4622bffedbc439b74a441770da03083f6f9dce8fce03ad5e8b4ede30f27bde8d","9425d68f0a3acb46e4d0347e6f73aea41893b98824227c73af64f4646c2a4447","2b725997583e60703c8682f571e9adc85bbf78c6686125e9c25562317cf73dbc","770954cc5c78a9161e66ef18ca2c0f947efacf63773a86279d0dc3c75e457c27","a1d665229261f9807083b4f0c266d840d95b12595b6fcb8e88a6f0bd2f78cb20","7162e4b99aa61c838147d793ec2d190efd35afefd2843d09783c269d2e52070a","5736b14a6ee95db57eb4c7d974614539ed67fc54a28619dfa971729b31256280","a1d9d348562bb2a87e7320356d42d9b0f701087c10d37ebf1716b02890730e63","6bf2266db580f32a2ce774610d26c445305bbb4615cd5a57e78c4156611f45e2"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621546391 · entry 108e9186e8c5677a3763…
Expected log hash
ce42e5a10ff40e11caca7d6020944d319ff4f139546f9e6702c021de8b61d36c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787889108108","kind":"published-quote","locale":"en","page":"subtheme:ifolor/delivery/delivery-speed/en","quote":"Fast delivery","rating":5,"review_date":"2026-08-08","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (897094661611…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.