Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“J'ai dû utiliser un VPS pour tout et le configurer moi-même.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2685255068

Proof data

Record hash (SHA-256)

1160042219977b72e231c184fa58aefc545ac8e284e2098a29aecfc01b931950

Signature (Ed25519, base64)

AZdFYzwU2jXQFkb8ZCMwgM9X2x16LQV3kMnWM4UVWM+oqD5diE1Qm01J5DnlVQg9mPcQtru6QTQVqObAWEc4Bw==

Merkle root

baa63339ed127dee6c2b1504d3718b71e94c83f7a90a1da737d699c1b2205913

Merkle path

["115d1f5b1196ecb7bbdb3d334fac48622ff197b7e48e83bf49edfe334c4c7479","0d4ac6e57417ebfe5a261103807c86f007ed37805974240203f950328ef2351b","d8b985c938c60f36ae5869e55805d40493d27eac5335276b7a7ea1b9760a8e0a","28e32606abad890d90ac76cc2591a3ffd672067d8f2798971702c400db928609","558ed7ff9f9ba1177c0fce02ec61c22d3d1c75231c01574b96d458c4d27d085e","a61ab28a626f2fb0262e3728cbe71cbab1ac18ed8ff447063d717330ec4476f2","b1153a304af48be7f3ab2dcb2351e3a4d214a150a5e904a776eab16e288c1237","e8c51ef77137ee4dcc51072c8d67e15880f07b4120409b6ad80b1ffedfa77f90","27f824b4dff64c59bd508f2a7e794a87baad4683160d51921c21f726d305ace7","8e9ee168988b848ca90875e9ebdd6e9e08f6f2de07588bb5eb63a41abccd76d5","866ac435089df85284784301c2051c4557a8d06a36a55e145220828746f98798","e2cf7144d23a312580a4836932a4fbe7f0ce303ac74ff7913d4c72f492af6b2d","eee880a255047d554444ad39a6fcc213a7567298f0f3441531c01029e7a71d12","ac24abf3a1c506aec2b5c0611268046e40bd3e23140aabc047f5c16f008d5dd6","11e6176a525c956e4f3a814b04624b93eb8f47dd129fbee2765869efbc5d4d54"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2685255068 · entry 108e9186e8c5677a482a…

Expected log hash

03e66e446ea90df8a21d7d402854ad37d81ce71c2336e953836f61c9bb1e4bf5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788348937690","kind":"published-quote","locale":"fr","page":"product:infomaniak/web-hosting/fr","quote":"J'ai dû utiliser un VPS pour tout et le configurer moi-même.","rating":1,"review_date":"2025-05-06","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/681a7651fe018221ac73235b","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (baa63339ed12…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.