Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Otherwise pay with PayPal”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1a7f6ef24b4aa3690755c7eb6a9fa46dbd40727477db7c8ff60bf6f268e8a9e3
Signature (Ed25519, base64)
Vug3y+J2JFLSuTbYed+Hw6h9TGsWQ9/QSrXpbJ17LVJiG6Kva4UpGwwiHOZeFPl4hl9/U0xl+XBzkje+54nCAQ==
Merkle root
2e3d871c1322192f29eecddde09b1d60f3198d79e780fa1195a664b4bd06a864
Merkle path
["1a7c9bd78ef4d3015961eebdb5c2de35f787e9ee4ea7d6218a452a1104a1b9f1","01d37865a60d38d07d7b22ee23fd36d954262e1e35efdb84a2f1de89d6dd37df","934ac136ed4d159b0ccb20ebbb861cc07a4b328cd5c06bbc9e63b186ecd74948","1b22b2441ab4955767dc15eb1f21b3509ac2cd211cca542de06d627384c5878b","638f678840a2a12d0d635f2b4a192a3fefa968eb496df233d398ee204010b0eb","87b3e7e6c86dca45d5aa487585f54c04249326756216e4e71f0f06ba13ed0398","d696544cd43f61b9eab4fbb981dd530bddb4d6ed3736b495272d2499f22113e1","8c216a04b6b9cf7ff8b8fa35811a4085cfc1e4304d0f0938425ee1b95c5627e2","edd57cc0ad12dbcf6622659edc627900d05f627b9170d41da7246e3b3359d5cf","b85635b22cbf0203567c32c9b4bdad4ba61f61af903cc1c4561e1c2913c569cb","ff53934e1289f7a86fb3f7830579e88b9bc8f5dec5cb7d3384aa700f1233883b","99a75b4dd4f269df8c1c680bd5d681a11382919c8eaf3be6cccecb7fa8025947","2d5b9611d8c1e5387c2a259b0d33678f993a76db53de4243f9d133a0209868ec","628ede9e9b0730d1cc332c261be38ff7c8dd0481f36e9cb85c838852e27c80d4","8951511b8bccb72998a9f731e365024a5c886ecac866e59c397ec696591e8130"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2683647879 · entry 108e9186e8c5677a3d9c…
Expected log hash
9b4e6e5ed792dc8e5468e146cdb00002a33cda5d0fe16d325e3fdc5cc54bfd3d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788327458165","kind":"published-quote","locale":"en","page":"theme:pixum/billing/en","quote":"Otherwise pay with PayPal","rating":3,"review_date":"2026-01-18","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2e3d871c1322…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.