Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“A bill with a QR code would be great.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1a00c8ccbf78071424fe1d2269a41066d4cd34de5453a4228227362b8b7bc74e
Signature (Ed25519, base64)
55PFuoBxYNij6euuJdVgdePMN+GgJuLlLcVYVm+YogXGj5YcPnxvQtIEnhYd69kPzP01XJqhgB2VirxXhJpcCw==
Merkle root
6471d9991f0d0aacdf442d5cfa660f2886071005e4c3d26a992a3bf38f0a7695
Merkle path
["1a039f8c555f7f97471e9d9f51f48290f0c4bf06925ffd43622d362c9647fd75","270afbcb86c40c651fb813262a6a53eb2a4afd3121b0d4cc6af348f72f430d47","6e3453dbbb0b04d97512d7204866bd51da0a71c26ac5cef1542ee596abed1418","558197b2f2d54c2444767b232886b0c0c91176cbdfc0aeeaa11d11c6ac99be58","75096fea2dc68b57f8eaace17cf9da7d775c1462912979b11066e8f04a092363","be78fadbc44bba517a1c94f662b11dc8ffd34245f4e9d3904da392b7c648e53c","164101c8e8a629bb48e36d97465f10d535a7681411b0715d03bd4de1e9c18d28","940962cae3c12e9c4f26a81d67cb24236109d49e89bb6aa481a2b35d73c25b2d","02fbbfed2d35921adfb6c22407cd2b0d5192583826dfd39d223e331e55f02fbc","0c8365dfa372f4338affe82731bae60f5ea17c0fc667036200689787944dfd47","d8443dad2eeedcaf6b1e08acd67a777002ddfa3615683fae3f12ec17a32198db","a59f473f9d274506fa4eb8bb77435c46df9ed0e103d16f78c4025ff05c650093","f3f4254b899098b98c7590d670f5fc0f992a4df0218d6bbab4ffa5ea42255835","930b7277e2ba0f1d182f8e7d0daf885f1526e50b29d8791024858ea5581e285b","a2fa997090d23b1f352d383369eee4da3a6661cb0956969a3a99ec5f82390d95"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621523249 · entry 108e9186e8c5677ad576…
Expected log hash
644ce1c7a13e9edd388468f8e29bb74f49a15185930851951709e16eaf23744b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787888369667","kind":"published-quote","locale":"en","page":"theme:pixum/billing/en","quote":"A bill with a QR code would be great.","rating":5,"review_date":"2026-06-28","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6471d9991f0d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.