Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“What I received was a calendar with German month names.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
17c844dd2d0878573dc0e1f8b6619ee403796e808830375369582673752d0e9e
Signature (Ed25519, base64)
//A4Fx0Mss2MoTvdOlDldX+O/4Vltj+CPltj30zPdh/zzpBpv4cu41OhXAO/oERj+0tCHj60fQ0unQtPQqHjAg==
Merkle root
37bab7ab6bae92a907497e5a4ac9fef6a8cc674cc365cd962e5b33be029217d4
Merkle path
["17cb5a965cb67fbb4c5507cae2286ede5adbf394aeafd7fc4ff8cc985881d93f","d9ff7810e15765df82026204604b5f00813483f45e743708a422b6a35cf26e86","54e92bd634159bbd9e3f3a2f03e9cc67d6fd993b2152e2449c8c17ae4e474ea9","1ef9ffa411eefa4932f1ba1c39333e5f0c22defc74318692544fa71187092c06","1fdb358812ce0e636f4949b2f97ed916de4480f361860b5bf5094cbf29353dd9","17575e9f4af88957732fa50d97dcfb2842f58ce5b94ccf0eeb458e154d57184c","e5e378d4914d3cfa7db60da85ac1fb6bd944c5bf2733cdc4ab28c5743f5b6838","2dd1e2865fb6db5c3c7708a8d90b56aea195034a4bcc12643bc420976f7de9ed","980ee55029b7f8415f96bcb622f0beeea2641727c81712978e53e12d00d826c0","36db2e38381957aa7c79376e89e7db32d72bae63658d5be225a823d3522dc453","3486f6f18514ca74d7e5f04a04402cfd9528bf5a242c1db2a66676dc58533e35","f8c87cefed54583dd6efd0a241c9f160ae382442854924df276fb7e0358b4e41","ec831a88cfac83431928609cb4878ed5619e6065160f677d7645e0479a63a3aa","1c8a8edcf77caa5fc3af0401d1e3fed2c8693428493c7127f3e51eef4f9cecba","61a69baf0202b9bc9628f4c2534169a082ad6e9020746ee3a84c82ac414b68ee"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2670833107 · entry 108e9186e8c5677a11f0…
Expected log hash
93b6693570baaa3e2327aa4b03aa01159ba10923124d4cddbdc139f813f3f422 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788230822517","kind":"published-quote","locale":"en","page":"product:pixum/fotokalender/en","quote":"What I received was a calendar with German month names.","rating":2,"review_date":"2025-10-07","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (37bab7ab6bae…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.