Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich glaube, mir fehlt noch eine Rechnung, die ich per Post angefordert hatte.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
165073997412d603d1eda8f09ebc19f45f4642aa3d2dc2e3114f01a8a3cf19f8
Signature (Ed25519, base64)
txzWqnwE06kMsMTwz5xwt71JCJVqr4Jc+rjTyNkLPMjiNu1W1GqvH/ySc2z4bZ+rTVQ8QyXH93f2Js6HsYq0Dw==
Merkle root
390000a3da07561118bd9d28deda7ce840b04bdfb545028aa4a507b52bf856fd
Merkle path
["164cd5b54d0306454183969e171123e6308d3247a0583f008d52315aee79e55f","3b686b4a62227d11ffe39cd18230f13bd7ae2168be59a81baf446a119c6f8eff","02eb1f68e49fa17208c5ad6919429de887af03f002118b061ec1ab55aaf6152b","9d4ded1d69ce3c26066a8f8bb9083e7dc0bfb7cb0200f2a7613dbc999387f9d3","3ea441096d127de59d91fb0ec103ca905409ca832105b97affa839a73a5be8cd","e57c4272e5de7541446c5fffaf2b82840daa277cb6060fda333b3c4d5b5e4152","535a1785da12379e4d4049209a1968815c369be6ef18f594b75aa494fc1205e6","b16a2356c4af5147cae3729cc5d58966f10d3cc0c183b29dbe3a1f54f07dd58f","0b95a86c9be4356a52572df539ab052a2b80b059da6fa3372cdd858d315d70d9","2ed55b44c3344a29299abd5b0d3a59e22bd87eaf09a6301f1b31c267ab41eb43","65c58c07d62d610f128bed98fc7df74eb2b8aaa4264d4bf7743312899ffa63cf","5e0d5d2147fc79ed08cc9756182839650acd3c74e3e819f1544a56a6d3000127","4e738bca4cee064274a4b665fd9e4dc25fabcba87d43997253660def0e543931","9dcfcb4b16c40fdab070f8b5e8f7ca37473a8c41d403ccc54087a606ff297679"]
Anchored
2026-08-14
Public log entry
search.sigstore.dev, log index 2459832256 · entry 108e9186e8c5677a8f51…
Expected log hash
79716a7239e07909ae68a0cdb6d9bccdc01078dc99c63effa81b2a3fb90ae394 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786675140122","kind":"published-quote","locale":"de","page":"theme:ifolor/billing/de","quote":"Ich glaube, mir fehlt noch eine Rechnung, die ich per Post angefordert hatte.","rating":3,"review_date":"2025-12-04","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (390000a3da07…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.