Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Critical technical issues.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2594412582

Proof data

Record hash (SHA-256)

0d188d2336aca0ec8536101879a64b621e4ae5e11ffcfc5e495cd5b3e436030d

Signature (Ed25519, base64)

ZHAP4PM0VDr2wR9M86Zm9Z1MJ6cEVVDef/29qyGwvRX2iTD0VYPtGpYRVVQHd8usIefMcPQk+Bin2L3LaMUeDQ==

Merkle root

d414e521fef9d6d099989fa0d693684c20b42a89a12033fe1adae5ceadc28160

Merkle path

["0d198ee2e6b3b3875b67ce633ffee15e60ccc08f943a76dd2d46ceadc531791e","68b673300c38832fe864e083885a93446d195c2bf4ddc6056c5b478e667d2739","6fff055ae18b2117791afacae132841bed6a0edab30c1b1d98b6fe52b2cdc69b","1d282686b7b6ac461ef311045a3f420082c359a3725cd0fbd583ff90a0bda9a0","fbda690f9274104664312d48d56bdfb81e00a1453750361b636e93c5b76a5899","e1241ee1ae2fa0d0e1476542c0430cc98bd8c81879508784d7ebb196bf8dc3f7","86693bc28d0d2615e3ba6bb29034b677c88ce827ab222341d605beeb9128f012","1a311bfa6e62e023607873231b27f06733d47c57e10cfceba956343b35688a5f","f1b38f9cf084f7d16f549cd146489fcf90002cf0e5bd5894d105a30005508cea","b23fd586fdd159138198a55270912204916496844eeecd6ddaa5a2e115d95fc8","42e7f0dee6bf395a8b5dc7e30b49ab5e3f2abe6507684358ff96452a664444e8","8fae7514a4924bfe0cf5e60743f69291a922a54a6ba19c537fba85dd4397db12","f77efd58ae82cd437163ba9ab021e9fb524c058feb0d1f3bc5d429c056be2720","dd85a03194c1b09d93a4be119d3146825d20c9e375d143636eff256904ff3e25","d9bed3bb20fbc734967be09c1cd24ec9d5bb72fd1e4fdf84e6057ce858f8bc78"]

Anchored

2026-08-26

Public log entry

search.sigstore.dev, log index 2594412582 · entry 108e9186e8c5677aea33…

Expected log hash

b1897d255cf944fc063c3044a4546ab02c40327197d891ce843dc1c45c2dff03 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787713855428","kind":"published-quote","locale":"de","page":"brand:bexio","quote":"Critical technical issues.","rating":1,"review_date":"2025-07-29","source":"Capterra","source_url":"https://www.capterra.com/p/153203/bexio/reviews/","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d414e521fef9…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.