Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They seem to operate ethically”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
10a7dd791b450cb73cc8f053663dbce7b5fdddc46cc23346d016dbf53b82c5dd
Signature (Ed25519, base64)
GLyxMEVPIx/S56TZJmuwlxirhADWsgwCVnWEbHil8FGNUnuMmpe3kIH4DvLUpeec/Yj1IjNglQiQRTaXG2UxAw==
Merkle root
d4012d7b55ace7b121db1c228197aa3496a055f0662ed02b31781c14c3c10633
Merkle path
["10a158ec32f752083c4c181231fc2bb67c804112efa708d23ed4fef7e9088b09","49d0ef6b348d56fa6872735b752e222f3118da6a6068d6422d8ea5d0048a7cfc","e439be09a9aed5f9664eb2395ce6ca8018f6565a6599cb2410e9a59aee59d417","641dfd68eb6f165147226401f0bff8db0dcc38bbb50a01ce5e595929fa1b2354","0aad9982bc015c0d4d2a3aa56fd82b32d1302bdff9804f36e42450c58ccf793b","7fc325450a584a15f0e759534c1bddf1a86a186d4def0dbe120a680795903de0","71ae8f5ff5cc7627e8a52c969fd86a55108d7f02f962cef3597f461e97f8ee0f","b4f24bc5ae41b9623aea38fe97e59b608b148e905d0934bd6a5148563d97191f","849ee85875097d45a25ea052b50983646ae2cd8cc839ddb214b6fe3646c5647c","5325b4e177d738c41226514a3d0adefac03b33fdd0ab8ac8cc2c63c34e6e5fe2","1efdc0f199352b30527fc965b02e0343404217052cb8f51664fc1d30fe5b4770","698d639b8f8e9129363b1e216f373a21d0bc7593bcc174950031864bcc2ad27a","f61850a567de29eceb5a6b083d24d3d1a0c0f3781f8545c703f9b98012e592fc","0e2004b9b19d663f7288f3a966f0d1c4846f4bee6fbd11cf70671dc6d2c1fcb8"]
Anchored
2026-08-15
Public log entry
search.sigstore.dev, log index 2472785369 · entry 108e9186e8c5677ad9f0…
Expected log hash
55e32604e78b7c07822b8f70b5d6a8c56159b7b02fbe9ebaa5d723318dc77aa8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786767737769","kind":"published-quote","locale":"en","page":"product:infomaniak/vps-cloud/en","quote":"They seem to operate ethically","rating":5,"review_date":"2026-03-27","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/69c6514876c3583e636e3748","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d4012d7b55ac…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.