Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It does what it's designed to do.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2671265667

Proof data

Record hash (SHA-256)

10807357b00205382a09207c0d759fc536fea555787754fce46d7510ab0da59b

Signature (Ed25519, base64)

4B4pSOYwn4rUKSPgNcxlut6FtLiGlWToHViC9AlohMx8/AZO6t9zYAGSl26CERuD8Z2IIpLymnA37DmUUDp1DA==

Merkle root

4814209eff208716b4535c2b0fd0b03895bdf3189545e82450cb75591e4887da

Merkle path

["10821ca5d506ab92c16d3bde054b6f448c2fa161b562a9b6555ba68f3329ec7b","30fa781f5d7a7257b931acc84bce14031bdc19f56a376292e296f1cb9774b199","c26572fdda5661e0554eac594209afe0701f11ade14204d97d3833443135aada","66d7beffa073e3ab06b38df211ce731fa3dbe682cc369e8730c8e7ad11809e75","67da891eec5a22371abb381047608b1ddec8de6dd71449efef1d8677c9d5355c","dbade939ec70c4f620e523d47aed13244dc402a9ce7330bdf9a1e810f7884a04","64a12b7ed9c55014e7518a5505488b69df86924599918d84b53dbbd2318e4311","0f1a1de3d919c9711d55b8c0e995491e2d6cca6b9ee1181ee20d7cdb4657e706","6d6db24e483b14ed4598195475b452c5a9711b2f6b8fa450675c74b64fec5130","ca933f1900d1fd8d480666ec9ab21c6c6366da875a086b6a5c369d23e7256437","ff23beee8d041d8cffde4ea8f96ff041ccbc4b997ff08977df76b53c67b7bdd2","58fc450d8d3ac4da8ac9fcfc859184c101d266d6f35f27c84cc4966e3f248dc4","5ca41ffa95430097818b993a1ba310362a9e5fa81d44bfdc04fd6a5a86897658","4222d4cb0e3cb98443733ef8f53c14d869249278d4ea410003cf03e3a343c09c","12d9d8014c44524a8d93c0e0f1440a3071b98d9de55311024d7d505c5879a63c"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2671265667 · entry 108e9186e8c5677af0ff…

Expected log hash

0d4aa038b3cd3d7cc8a3744c8157ddb93929116887b29b6be030d34102a7e419 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788234112368","kind":"published-quote","locale":"en","page":"product:smallpdf/sign-pdf/en","quote":"It does what it's designed to do.","rating":5,"review_date":"2026-06-26","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a3e7d906538d1881b2fc75c","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4814209eff20…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.