Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Good value for money”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0e25c0530c79a9fa8631c7b56ef9c963fbb96c673dde2bf4941be244669ea1fc
Signature (Ed25519, base64)
hjc1Un6lsPemWpR5fe9TvAyPgqOQ4YQDWH1kEre6cI9/63xcR0LjhIdBG8VZOe+eqN5N2ZptT+dkNbrFUYBdBg==
Merkle root
568de27ef784d24fced1ff6a77db7dd17bf4275bd5784f7795efbde800264945
Merkle path
["0e25b1c97a5588785f91fdcff8658632a31accc6bc28b8a36484a9e20195bd2f","b78487cec9604316b63e86d2b190479218731f386893bb1161632b44f7424548","7d75afa9e62c46e011749b7d0bb62b6074791e9a31156321a2e0dd5988e1b6c3","f84cfc79e66df4534baf4112734e2760327e3621c6379839cefdd059680f05b2","4c76bc1d053d416f5cfc49f5613cf3a02cf6cbb45287618d14eaa6b107341848","f662345408306c30904f8e327acb120c71d8b612bd111011689205ff6c98bd95","5adc5a316059999c6cd322562411c3fe05be740a7887467125527bd562ee33d3","6eb2222324ae74808649937d6eddfafe751fdf933fcd193e8acd60874574cd8c","767c42951f779ea031c30c370e06345db5bce8b09b687b94a5472ba99cdd2719","80d196ddfa63f4cb1fdade3085f57019d86dddd8d610c007886a28d306cbff7a","0e3b62424ea4f3138076bd50d1890a5a44b61ffc0a34bd4cb87c6767ca82fde2","e0a30bae2c840156322dae52a02b08e3566a5cd586b033b2074977fe1c676705","b00deb9332470bdcb2bedfb8410150cfab1cc2f7a3ba959be220a4ee71e29732","3940a42145b26dbcc3a80df28cfd69a39fb071ca190610add4dbece01cccc9c7","b986cf6ce32ac8a848b3f8f187759eaad7c0ad1b455850f1924427e953c31abe"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582597535 · entry 108e9186e8c5677a8508…
Expected log hash
20488e7687dc1a73ce99efebf3d47aaaffeefc76737db7dc492f239bf4ef26dc The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787625364142","kind":"published-quote","locale":"en","page":"theme:pixum/price/en","quote":"Good value for money","rating":5,"review_date":"2026-01-20","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (568de27ef784…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.