Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich werde sie nun wegschmeißen, da das bei Pixum anscheinend niemanden interessiert”
Trusted Shops · 2/5 · 2026-07-27

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2593501033

Proof data

Record hash (SHA-256): 176469fb491b815941d818532d333dfd86aec8cd4c043f121f84a6c99ad3d5d8
Signature (Ed25519, base64): nRP5onqUMUJjFXDLC6SI2545aKGej+9WepnF85p30QprshGal8L7elfAItNEqirqrqyzXYo7QI9oGS9ImrGBAw==
Merkle root: b046f5df2a406d6c32d4f87e14105e0107f6e314c3d6063465b8c6441189c891
Merkle path: ["17643a2fbb8b05a20bae11aa10651bcf59d8553834d1722fcfc0b420f25e3f05","91588abd50e6c2134c4389c5a872641320d5f46244a1bf340ac2c04002b8eba6","8daa0ad08c6f2bd8f540259ff5e30ab9a3619b84022d5435346c44d503af8ee0","8a2b948250f7e85c4b408cd43f562ffb664562747204d9c0f79aab2252286325","9bfe05c0554be36ec9878e887539212b3e7ae0a704685c55d5ecef9e7b78bde8","89db0e3a541287598e865072daa28fb5d5e6f9aa8cb16e0d9f69dd30de0944f6","e8856e3f3fb4157725c53f0693232c144ca1f9a5df0653a674c017337b78f3f8","e6f00626e35be6c7d0504efe15d397fb2054a883125ca81d00ffafb1e87074ea","07818879c539f5e4da0302b219dc12acb64b1f98d5a8c70b3d4fe9c06b7b73e8","be035763f269ab8b49ef160c58a0a25543fa1c4f4d1d8b824cde23606ae46ed6","7ea4f9f429d8dc9f35f4216ae56174c4d50cfbb6f43f1f644ed33c983b44a296","01f014457410f90e975eb3d5f35c027d99a0857d2dd4e4d65fab61eb21c2e49a","f337a72b5c8d32566231b69df119a20fca7daf15172b90c66e1b6d332dd78858","c35362d8be7493456726dffb35f813b4e10ace25b8e2c3679505eceb5d9a7bb4","4a4ef39d7ab636950ca6d9b7d70c958b0ba84299c7f375e0932c9308990ba8e0"]
Anchored: 2026-08-26
Public log entry: search.sigstore.dev, log index 2593501033 · entry 108e9186e8c5677a6e5c…
Expected log hash: 804ea852a1c1b02b8c86a35cc42390aabed87fd2aa29b8fb9f7f25e79321f581 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787709693011","kind":"published-quote","locale":"de","page":"theme:pixum/returns/de","quote":"Ich werde sie nun wegschmeißen, da das bei Pixum anscheinend niemanden interessiert","rating":2,"review_date":"2026-07-27","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XFAB7C17C298F48909E8C9F2BFAA5794B.html","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b046f5df2a40…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.