Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The complaint process was smooth”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1350280df29eea1bdc0048444851e78b886630bf231331629c77de8fe8269731
Signature (Ed25519, base64)
s4n6EDsDrBHeHnT6FqMNdCNgnagrByxKANRPeHnw2x1gWWMlgaSp9O18ZrEppBcjl2o2Qv3ZpC1YS4RVGXbACg==
Merkle root
0fdf8a945cf322eba60395065bdb38bb3eeb32c52e065b6c93c48bb56aa3bb91
Merkle path
["1351a70ce99832080613463bfebcdc227cb8bf47d9471efded365eea0a48e29c","9951b252310fb9d7f8f6fd899e3f1469b70c2e3c447386349125f1b8828c0912","44be6638c4ce27568cc52f5d095c403ee4571c0ae1d58ade86d60a9e896d8ca5","2ce1e6f2cb00f72173a8cc6dce9cf9418592fb06df5cb4087a10c06d6f34c114","31123e12cbea776229a35277502984608f6a354fc577532a978421f29be27046","102a86c5689397c447ac82fb4381f26bce843ecb296b71959be43321d23f01f9","a2557cc4d3c2d8b7ad157542422681c59764cde707c2c131161897ebedbf8d02","08088f6874c0a73eb532305096c2005f4949563b4c7c56f5f57f1a7fb8f0e94b","84444277dd1f3ce571c034bc2e99e4cc8c5dccfc99f1eafdee38b374bfe25543","c7c7c10bbd66083cce87b2ed59526871f995e9bcdab959c1a0162fb50e99195f","a0ac3c9dc814df88b82a6e7d6f2602be4b75efeb0a717fe03ffb8bc9290f7bb0","6d29e33e5fefb46385c255036c778f7012c15e8953e15d2c708456fe3e94ce75","193dd7819b5cc0893cd3620ab02042348a20821938045af5a341e160ec2e8bda","d97c31a576cd351fb66ddffaddfc87228fbf93ecf06301d5b8aec9b37e0fda68","31e60baa9fb8f672f686fd126d7dc82498bbfeaa38bc676e67691bf1c2c7c210"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2541942774 · entry 108e9186e8c5677ae0bd…
Expected log hash
4825ba618d3c3368179be13912e101812df871de37f30b1ec256ca6d987713ec The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787277864570","kind":"published-quote","locale":"en","page":"theme:ifolor/returns/en","quote":"The complaint process was smooth","rating":5,"review_date":"2025-12-31","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0fdf8a945cf3…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.