Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“thanks for the refund and listening”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2656977863

Proof data

Record hash (SHA-256)

19ebb384f5345babc79fea9492adb9d4ac9b19ff807881bb144d394e893b371d

Signature (Ed25519, base64)

rQlGYDfBkdWp6IZi6V4E9depJ1anPGUDMxusoaskJ8IThd3sy2c8Eq7TZDmumuyJfPr+QgfiTrQviEhLM4oVBA==

Merkle root

0cb6814e51c7eb056a01f84349e58060bb6087dd0cf96aef0f27729d4d4fb276

Merkle path

["19ee0fbb50260b22723ee61a9d34b1b040c7a3444ff9206a2f41d6c37be0a3b9","af0bd171693bd7faef579f1260d0af0f548e292ac4eb08de8992a2126ed30c24","e8fefe1da70669cb434204aecf6b9c3b8fea70780ec221afc68260448b36c61c","bdd1672c6de09fa00b26813dc16608055aae55922282df8c023adc1bc98601de","00db84efc0d6ff3c08db7da7dc32e314063cfeb6f68b649a33094511b587b311","43d3013a32b79c874b42e412eb142590501e0a364c7bcdf212b93ad266d3ad89","69432e7f3f8853937b42a3f7f037b785130c6fd658d9bc39fe5844e145a93fcf","20c9c53d15104e862d677b86e77d8714caa168364ff4acf11879d80b01c97f0f","59e231edb49f612a83c47a45c787736816a1a1ed21b532da3c9c5915f00be51d","9becf18e1a7479661653bd5b9ab2234b89defaf5f5e861b1d9057a67f4d686f5","3b46d8a92a0b832f8791ee6f2734ad47a6352119f470407eeaa84ac7c0067d71","6758bb767e85d5c51f614d56ce5cd96b379035e373a62a688bba752e4359c875","be1dd0e45f7494393f0e1b32c70d3c985a66f040e38a68aca73948a6803cfeda","2518affc97ecf822332e259f6b71ff1d6b20920b0b5c6f8e1080f3c11eb6b936","af2962fc61736883c7077a83c82f90f0eaef6320643194fac99217c4f69a9d04"]

Anchored

2026-08-31

Public log entry

search.sigstore.dev, log index 2656977863 · entry 108e9186e8c5677ad8e2…

Expected log hash

50611b695debae6fb0a9929f4c3d2c8dd8c51d8e8342a15fa077624a80d81709 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788142253421","kind":"published-quote","locale":"de","page":"theme:canva/returns/de","quote":"thanks for the refund and listening","rating":5,"review_date":"2026-08-03","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a709441534ff49b60510c60","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0cb6814e51c7…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.