Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The delivery arrived at the right time.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
154e1607d4bc79035e84cd26463a5ee38fe29df8f5950d9c1ea1a3b4ff2b4d0c
Signature (Ed25519, base64)
zi4yVddMiVVvQMmc+1cUFLEC/QbkfX1YIqbqbe96iuiVte3DUt6Nc60ivxahQYiadyLzUTB1TPQe7A+JYLPPBQ==
Merkle root
6471d9991f0d0aacdf442d5cfa660f2886071005e4c3d26a992a3bf38f0a7695
Merkle path
["154abb8a06531b6792a35bb9dbb7277e9b92f69c359ea24721289754e2558f7d","3bcc12e58faaa456ae38b70ff741d47bbbeb00ae3a561bd8628390d319e962bd","5b38eb872100a7bf7e209d80c9a6c1e9d951f09f1a614fe82acad50d9da387af","01b92af15cb97bbd18eb36c9a48d0f21257193c21e2243872f27d2a43a148841","7caaebe475056ae6331499f94df81130100477e2d5357e1d5258ae791f0cc3ff","ee50e55f16834e0f0ccd9179f4928ae46680459617bac36ef32be05c33a2b173","972684d95420336503f44e63c9fe2341647066d7bd7565e95e6cadccfd0618a0","4e5605f0786d316bd2b7115d4698e97e680adbc54953a8cda8bf2d4b9a72e395","32d47a0d58edbeb859c343c898f183fe252fdf1b8d603b23332cfadb78ef9d3d","eaab9df7b4abed3d99ae65879cafa519b5b43091a73ebdb2829169dcd0d1ff6a","39611481640730b1b5b18beb7cf86e0d44eadb01d20ae3ae4c61e20a199593ee","3b30f3c4384c8f930b0902f0837c734e0f4d8aafe820711619a733e25c756cca","f3f4254b899098b98c7590d670f5fc0f992a4df0218d6bbab4ffa5ea42255835","930b7277e2ba0f1d182f8e7d0daf885f1526e50b29d8791024858ea5581e285b","a2fa997090d23b1f352d383369eee4da3a6661cb0956969a3a99ec5f82390d95"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621523249 · entry 108e9186e8c5677ad576…
Expected log hash
644ce1c7a13e9edd388468f8e29bb74f49a15185930851951709e16eaf23744b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787888369667","kind":"published-quote","locale":"en","page":"product:pixum/fotobuch/en","quote":"The delivery arrived at the right time.","rating":5,"review_date":"2026-01-23","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6471d9991f0d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.