Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“For us, it’s perfect!!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0ca3b85bf927c9d6ea98fe10c9a195c92736406fc603b837434d60c45fb73499
Signature (Ed25519, base64)
Y6O1qOUf/bIiH/bGUhqtTqE2VZsBZLpPGi2C7R/z4p7vZmwWB8thTlmj/LisqfeP8rBHv0mcgWhGhLU23M2cDg==
Merkle root
79bd9ff30206cd9f2f0827e8e360304e72338e2a6538208f6a795ac0d27be440
Merkle path
["0ca8b0e7c02131670b509b0596f63460bb23e28ec3c248a9c795b6ad2d5aa92d","7a0da820583f446100c495f82b97b91549dfddb27b9d8d501e77895a1f61e8a2","192d0996b2df98a3e6b8740b87147fbe708003818a296d181b33df647178bf49","41a2ffba855b1a22a4037ddd3a12a0a3707a9fbf0871cfe40cbbbceb8fd26623","1e2a940bb1348ad5973bb4b3a85541df96510d66c830cc5b0100a3789f17558d","f94f4689beca50d469d08fab8e3141ba89a9322f8189bf9bb858c93b9520486d","6484f36303f3dc8f05e273327068e1ec90ddc1556b931c1a1608aab7c426a941","64b023ac366374b57018bc1c0f9b7cd4ed3724be4abaad1c9ac5202fc5430770","1f1abb08ecdac2c38bd8ebc9fd31961f0be77d5f50613c4ea6edd1e0907ae593","c752839883dac046d78ae1336bf142a89121590e69f06fcaa47a99daed4c6ac8","6f27b751ecab08f3040b67c0441be56c29a79e1b7b6c1547fd4adec896a0d32f","7acad3c67c891824f9b5dda51b63df0ebeddf68cc289d09bf80bbb1f6db52c3b","e31b3b80ffbe5d0f34926e33a057ac1ad2cacbee2c3c16fda9c5e9f8f02c8f71","9517b19f1f7a37f81f00e84018a6e59ff930d698129abc0e98c33f230cd4311a","02039d4391222bc60d104b52b52d2b392a39e81902cffad1cff65a2d43c0dfb0"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2622459130 · entry 108e9186e8c5677ae09d…
Expected log hash
3805ca9329ec46d2400d87d224f109e9431be016decc34dcb30057abc3255069 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787897541116","kind":"published-quote","locale":"en","page":"brand:bexio","quote":"For us, it’s perfect!!","rating":5,"review_date":"2025-04-18","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6801e5c6a36da77694b36e1e","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (79bd9ff30206…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.