Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Payment method = builder”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1a5235ebd69aedec3136a1a380c80e312b2647876d472aa9f7f1de2c8d037432
Signature (Ed25519, base64)
AmVoAASZvcJTAUAYqxuTS0ZjHKaLCDrchxkPmgiH0s+mo17th1XIuLORq19UeAmp2IuIDxgOxjR+S8jdx0QyCg==
Merkle root
7b9a4691b4a07ac5d1173e4626ce63916affc643ede736e9a42881218d31d172
Merkle path
["1a52be7a843c85046d82f915256be41825eb111b1bff3c01dba07be98f3ed763","28ee2601457445c32ca8621a9214275e5316f6c4a3d1248927141bc2591b2c69","648f5c8ae14ce7b541183c6d5520cd7fab531909facb9ce83262093e7202480e","771ac9724b7cbb8cdc9da5dd59e81bb2c28ee29997939ed9005d352cb24cabc9","2d1aeb23e0c5c991ccfbec3238e8520d360296f8854f8ee2df9baad1c691827e","140e01311f8b000394eafd94e8d7202aac13857887ae28779f23b3ac8efc155f","156d430ffa13436170b57d48fe610d8ec678689005d07a375136af6521ddf81e","15763b000c70c4db448c8d139deeaf1fa0a22088b830dbe8c33753da85cde943","17857187b93565b16c17035cf22dea7404dc061bb62d3f4c4ddc7915a4cc8ae4","acf122bac31980fcf42816031efc5097783e1847f528da80d8ce19d153e37091","347379f4e3fa1cc525b2e10bc2eb74e7a5b6731c9553163c40fdd9a5b371a8a4","3dc197c242157a4908f850b83341676e7585baac073cf254c3beabbe9daac18b","7406413224613615cc5cd19a127a6e24768c7c8638c392959ed907b3dea0b3ce","1a45b3586aaa1d52bf0d35f80f59c2194992fd40a7bb573af53ca4a9c5b2c40c","e08d96326ef8a4f2d48853bff915e1bfc3b77e83a5f37428fc0c18a79558597c"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2595408668 · entry 108e9186e8c5677a623b…
Expected log hash
7ea3454fafa335b6d74b2f12cf180783c952ccc9a9ba89af7d5ee27b01e07154 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787718572132","kind":"published-quote","locale":"en","page":"theme:pixum/billing/en","quote":"Payment method = builder","rating":1,"review_date":"2026-01-22","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7b9a4691b4a0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.