Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Overall, good.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
11028357231b115a57f41b21234d64e4515ed93e2d775f84efe3a4bd1d79671c
Signature (Ed25519, base64)
nRnf+S07kLjAk548ScQZKKY6s3EpE9j8Fx7okqNb3dy07nVDTmkKAhMmdaYGjB3jYXNOGfOes8eeLW6W+So4Dg==
Merkle root
d1a08bffaccb4bd5530121134500726bddd8b9ce14544f30c175069340e2f6d1
Merkle path
["11023cbaaebf46077863f6d74d893a13488edf0442fa307464d1e8aa8b59f805","45f98fd95d7efaa718ec83f2bd30e751d3a4a02ce334a380a5591aef20478ff3","e9ae583df3afdb731c045a35401f5fe1c45cb50f5961c5e8ecb1e2409773fddd","5cee0274f12c631d38ddd46a5cf33d1bd4db533ca88c63cad420ad86a1edd8af","2d6c1612b965def8b3458dd84d77179663d1e0d2474512014b7b81b896413db5","4c13e0179ec4015f34b6c017b7ef702a804d602cce7e5892b562b97c8f4974f4","9980cf04b7dc313356581081b79cfac17cf1894cb958faf7ce6caefef982f8bc","3740ef9c94ff58412b6b960521514d6dde16e4a83b73e2f67afda9d12551a4fb","664be30e094c5b60e47f5c28bfcd334080746a6d4dfbc0526d2fba1ee88bdd4e","1bc3cda8412119a2a91cc227a863081ceec8db75ba48342031a5d20fd5a4f4fe","63f5a04cba41fbdd46bc301d0cc3f890aaafd8e71e2c45e12f4f3cc5b65ad827","422708f79a43a06560c2c80c58a4791f51a0b5498182b85809a9ac791b982ec6","25b83424b4327f2e26a2b3a1a83c1014ab2556207095e3d1112c414a2906928c","784b674df69e59ae8daa59037ba258b386fc987e1baae63fb09b14c7d0c016b8","09bcfd9352291a4c3cc61839df0884138937d69497778283c8e6e0793ca45e03"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2670724217 · entry 108e9186e8c5677a8322…
Expected log hash
db226267e29a9b0d4e7d26b93b25b0493252e02586281022df7cbce6abd08871 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788230131663","kind":"published-quote","locale":"en","page":"product:ifolor/monatsplaner/en","quote":"Overall, good.","rating":4,"review_date":"2026-06-20","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d1a08bffaccb…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.