Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I paid for the Ksuite+ service and nothing was enabled.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2684135818

Proof data

Record hash (SHA-256)

1053697c822304ea3b5001b5c923351863cc3494fb65e2ec847be71bb4981ab7

Signature (Ed25519, base64)

MMjyHvgiiVBxISa/OMYugLb0IQM+wug1LvSaF2f7RmaPSk2eolbB6cgmJi2hb3I9t6OImgtRLwa4wri7YFhoDg==

Merkle root

b3122ddd7ae78437c88b5c432d1d272e932d99a36327831f741296c5804e0eec

Merkle path

["1052f30404d29c67805d1021ff9565fe7b09ef329ab5f2ce56685dbf397e5a5f","4fa5019d9477f97c0458ae8cdea128c1fd5d4bc5b9d5d3a5bcf715ed16e09418","2f486ddb07e87e98d5213305fe816639c3c516fbbde724de04b4f93a2d298d2a","03e0b9c3389d6b9aa17d76f6973680768fd19ec3f174cb08d6b955634c015bbd","27be094d51e98fe1781dad86243739b3ff7b6d6be24ecd44d5ebbce0b519c8bd","36ede4f02626b9e4594fdd957e4c501b6050f4cddbe53d43b6dbd6eb0b3bf7e0","f3cea06e51d219d6fa2feb3199e523c27c869681bab4cb0694d0da03b2f3f1c6","c7ce39f0ce3b7ab708e2a1bf86b51bcf26fbfe38ada214ceb454a1909ad5a911","99e88a54821af13e3f85fac606d742a89659ea6b5e600a01c9883428b36e6c45","caeed0d161068f2a58ff628229773ed94c352396782ed4a84f77a3d164c37b67","2af72f591887434887ac4f04aef10d065a53ca23b48c80d373c3274b5f82853f","afc410f4c7c2995a0b70eb5b9073e0604c33387ebf2e2381b9760ff10ab70cf7","c22e3ca4e13d6be34d7e2d787b0073655e272c17b975ef51a9080763273d2609","e0f5a3f9535914a67d876a5c4daca45483a20818791753e411dff623a270df15","3414a8c2f9a037e1540995688a310f939676497d9d86d0c2118ec57a53e60c3b"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2684135818 · entry 108e9186e8c5677ac65b…

Expected log hash

aa65ff4939d7df1f40b93b48ba8bc57094c1090543a7b0494509e8f24b5559df The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788334509514","kind":"published-quote","locale":"en","page":"product:infomaniak/ksuite/en","quote":"I paid for the Ksuite+ service and nothing was enabled.","rating":1,"review_date":"2026-03-17","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/69b9b3b817473f6d52492763","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b3122ddd7ae7…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.