Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“THE BEST AND FASTER MERGE PDF”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2445296928

Proof data

Record hash (SHA-256)

0dd8b2e90104d7237f3e79a43d805420592b2e1e806ccf12d8c347c3afbe7bb0

Signature (Ed25519, base64)

D5vdnZ8diser5LIecBff/UCFmjRWcsbeJxLNNn4zbHrDOBf8a9B1R51N+DOrOOgKs2xHWzQjS0eJms01wPjMDQ==

Merkle root

d172a7cf956e2b148257f1904430b57957f1397e7267d8861b84c949d8e35e40

Merkle path

["0de0d3baa65ec8ac81977da2f988ede62d112b29df31391293589994bfbd6265","2b6992d4bd45ae63add2d53f1a58f568f469e2b09c19ebd4de3fd98074ab19f1","4a4a6ebc930e08878f7f731bad0d07ba8afcf2ac7d93efe9c7addae74c57a197","10c8b88a63cf134fc8a7f9f599d07de04e22e0c840719c28df64038bfd1e6c49","3d3c806c102dd4eb4ec97b9f5cd8bc3b7f7a71b13a2606bce1dba6b22e187459","ca339c86d92c96671416ccb8874d21aee00076d214bba0e99145d548a21b59c4","6f3e68b50b0ec111fa5724f6a3078f889f0c838dcaf4278b4aff54b82a4f0113","d8852f7e5b10402b8044d9a878120e3a2972aab47f53b1d1188f245fdd892e78","aa2f17ea909e6f9730dd4b7b6628db9f92a210a0c08a95e796c85dc18ea7fe43","5f8e94eb3956812904a8e0dd0a1833c42619e50ee822e592aef0f0d056660c38","1b884db2791044311f61e64ae2dd1232246723259327fd8ccf25489189fb2cf7","94ae8e4f6adb62d3dedb0d45f6cb3bc7ee886f50c769e386c26dbcd96e444beb","ec9d22a60fb3373395242e0bee52cae203406eed591b174f096249c369d00f81","24b78eb17781ff82da235316ce22b13d8e2206e794b324b0ed78181b6c334313"]

Anchored

2026-08-13

Public log entry

search.sigstore.dev, log index 2445296928 · entry 108e9186e8c5677a0a62…

Expected log hash

c9abcace05ae14f54b0d99899537438e06fb4d27f22b95a0509613937d3e30c6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786588795034","kind":"published-quote","locale":"en","page":"product:smallpdf/merge-pdf/en","quote":"THE BEST AND FASTER MERGE PDF","rating":5,"review_date":"2026-07-20","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a5dbef557ad75597436b3cc","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d172a7cf956e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.