Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Saubere und ordentliche Lieferung”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3121837738

Proof data

Record hash (SHA-256)

14b3b87e9b97c1ad7fce8d6f6b46f3653dce3826906ac43ce01e6dc815b36f02

Signature (Ed25519, base64)

/YOea/YG+kWYHE2xdy/ZMHcxUb9RJQPHJHghPbN/kxT2nLiMh2eZUoBvAORLTodO8Sjif8306wZF0Lzgf52rCw==

Merkle root

9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945

Merkle path

["14b29d1b25dfe09e8cd5c38c3fbcff579ea2a9540fe6c9ef717b04acf58942bb","62bc40f20b0797400ac9b97ba052e31deac31136cbf7816c30338be80e3ad88e","b8e18f31ebb37ef75151901dc94999df0ff7355dce6b924c6d901fab4516f69f","929cee4578253ebd84f85d13cc44734d1cbd4aa34b5e6340cdc4195937fc4758","71c0ad382384fd4e4b7c2cc3b3636705c34834aa05e6e9bc6ac1dbd6ea3bb2c2","1480fe93febded11a895d976e212248e2c25361cb39d5e9007466264ed9be2fc","372168edfba7594bc988cf24b1971a21947570a6616df6b0bc191d1dd810f55f","d8b31179bbb1cd86f1bc4d07369af3e9c8b12d2d192ea5ea75d169eadb50fe41","f8e8186354ae9503aea4a32c77b0c0580cf6c362b0925198d424e115a7e7eaac","977c41b8e60d8e87ed3d6779385be571a0b739dfc0047ad9da939c95cd4e21f7","b59947a31240d511dccb39c19501fd673f414ebd3ed855d312a0b33ed28dbe0c","2d979274d680ea02cf70c9d6188063cc19e622cbede790249a7762852386b868","1b6827f0620411d457632601225bf0c0fa08a550569ab3a9309e36b42067eb0d","97b419a98acf461915694d49df1436895896a22d4e853073303f64e609656c20","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…

Expected log hash

a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791340487550","kind":"published-quote","locale":"de","page":"product:pixum/fotokalender/de","quote":"Saubere und ordentliche Lieferung","rating":5,"review_date":"2026-08-14","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XFAB7C17C298F48909E8C9F2BFAA5794B.html","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.