Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“there was no support”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
170b1a7d884500e4604b5513ca1ca5954ce4ca0cefdcbdc1b9e45b9dfdaaeb92
Signature (Ed25519, base64)
aIwaQZb5Go9qRif2Z2W7Xg8eL0Vf/KSLyyq+1fBVa2JiKEYMtG7tcL1ush5VdY6TAq63CyNn1fq6QgsZVyl6CA==
Merkle root
c69b412346f0db8d88aed17dbaf2e4876a3743c1c4d16fb306ba56b5c0573123
Merkle path
["1709ef0d4eb085e3ed2c4704ed705962526bd12017b84f6aa708872384db2cef","55dcdfa8838febf8719fe7f470f3079adbf9c467c77b48c7775dcca9fc499b54","2480f860a3c446ea2201b9194ca58d99cfd6a855c2b7946eae0ffed2ba5140c5","ccb648af8e728fc1025b46b22f7d5f2bcf830d8ecb2e6096c06cd04db2a4cc06","9d11aa53113f93c07588836cf36216ad66cec4d6352f19bde478e0b5d93d64d5","a3c59fcdd74b980a00e473ca5703226e8f66efda5f5265d9250ec6d4deee109a","4edee9836cec4d90e4eb16423cfe498a1a659c5341cdb7aea2ea8a56907bef97","9ac985335fbb013adf4556ab28343c2505530ed0a5eeb48d96d0f81e16b5dcde","f71f5b798387808b15dfcdab01b9493fd0b8a01e2edf98949728a727cc229151","9a6606f69acbd6369e6c6c6ddd201d2241712a17b1d1c071f037690ee164feef","3ecdb6488bc871dee592d07d294f888284dd90943caa250d8408a88510e19f35","d2ff7fe4617f0faeab86be5a07d9e5994cb2c5055379e39ba5f38bc3f21c4e08","09997fd9b1ef8c57766815e6c9849e05f2447cb27e8d805273108da18c60273d","62927e8f71080777dd1935c21221e60b742dc0377a31e2f20a0a64cf6c3282e8","3da38b679e2392986aef224a332d14750fb3a22c4e75287765e8f68f575f24f3"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525010456 · entry 108e9186e8c5677a4287…
Expected log hash
659be4fcc7663b2dc65a53351e16497fea44ed9ec8aef1f3c48c8e452b350dc6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787194832011","kind":"published-quote","locale":"de","page":"theme:canva/service/de","quote":"there was no support","rating":3,"review_date":"2026-08-12","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a7c783639835da0c8faa064","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c69b412346f0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.