Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Finally, the shipping worked, but I had to pay the invoice.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
13cfb69c1c531ba910351358f52f1c9c61a1b68c317ef25007829f22f70cc396
Signature (Ed25519, base64)
7ld/UdKaszmR/DDWonLgkm4+ijaGD3Ta7RMezOqVyb7btVuljbFJzm6FSmgBQU1GlIsew5ZQN8C6lV8NpipJBQ==
Merkle root
5d4c740cfb04de8d4854517684b156439ff79300bdd067e79539539dd3846340
Merkle path
["13cd65bcc26f4f411558bcc93595743358ea69982ffd47986e38edc5dcc86782","b32db5e2a0b23e995e7cc88e5cbd5b89202eaa6efe0e5f7b7972c104445cd549","7be36cc9257f8363d25521308824c1484d99cb39a593d5fac0066827860f0df3","276b24e2201be00c10b56405a8cf8ad22e32df5743f44e8b874d3123f33c7327","ae157dcb5640d6953351759652ec403af0ac70954d491d1cd8aacf2083204136","ad175484912c0a921789624bc6b5cdc6cb0f305b3dab98bd471f60dff15aae40","9ce31468c479fdfc6e2fd3a1595456bcf9ceb512181fac5c79fa1e4248686ed2","03a163c6cde5740ea5306d977e5b17dabfde95fd8dbf7e67edd280d13e37afd6","63c0d742235b5bc5d413095a93fb174a1c8846b041eb2227d7d5ed7cef15d2ab","2c64a1f6adbb7b3034280a3708e13704798b9c97f832a00c9a703050d024b5d3","6b0b909eedb267a3df6aa22331850703b2f957310807f264dc982923caad2abb","3d966bf9eb9c173480976357bfad8ab8a9f30e0030ad2552b80594af72683aa0","5e27b068076e1a64d2c4a3f8b0e7d48cc15ca396e4e09f17700344f4530128e0","a377e8a70654e5d15090d2c58b23722fc9eaf89fbf61d1f3010bc694e59ee4fb","2e63e22e3b767e949db06640d7c1058b569ed9fafcf20124800547f9cce53523"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684971219 · entry 108e9186e8c5677ae85c…
Expected log hash
fd3192eb36809a910252a34a8f2882c4830a1a219dccb9afb1f12e6b5620cd6d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788343168574","kind":"published-quote","locale":"en","page":"theme:ifolor/billing/en","quote":"Finally, the shipping worked, but I had to pay the invoice.","rating":3,"review_date":"2026-01-15","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5d4c740cfb04…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.