Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The issues invoice was way too high”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1abd6b9efb68d40eb45c1e1d69e02c9c64795674bf38d25ef9d3f6223deeda24
Signature (Ed25519, base64)
XH/AtHvitfuPQv1LapVLTUNmq2uBSeAXN5tj6G6hYqTzJCC9ceHIrzrz9oSvhP/NE4/9citrvjuCB/f+3LFcCw==
Merkle root
b3122ddd7ae78437c88b5c432d1d272e932d99a36327831f741296c5804e0eec
Merkle path
["1ab728ca055eb89b446409591848088b4387522abd31c53465b4217c2856f892","e8a2137887771200ca911f5504fd6db6bd1a9ab2cc4d659ef3ab1ea5c6ed7bdf","fd8e4c6420f912b8591690c7a2a82889c15f57ebd7ea8ee012f3d86953b9530a","af86bdbd7918fcb7c199a39a33d3ffeb0cbdd2e66cd9df9b4f0b158a57f432a8","d40402566a91a4066b644a94f87ad5b26e1cd11d3d5e24c6d5e119c5a7d9fa59","7e45a701dcadf1faa7dbc839965e129e98d6b1645cba84ea3a9432cd575d125e","946aa2915517b67d76ea88b170d52cc109a260775171babee59156f145db5502","e13d0914762e69e8bb2d4f73c81a0a04d6fd8f2300085a6732fa02b3ce4dcdd5","95f6b5fbfd12fed40e4b6f524bbb39742581bf07ecd44d687883a1a4ce636e4b","603a1089815a62d0da024a521ab1aa4005615f4451e22c621170812ead252bb1","1edace50ae75a440643a37df3185d4e6d2910cd51e257cbcce2a3d13f6a5370a","4cee8910c2586f2a005ccfcd48e946423c21667c380504be24764478a5a93244","c22e3ca4e13d6be34d7e2d787b0073655e272c17b975ef51a9080763273d2609","e0f5a3f9535914a67d876a5c4daca45483a20818791753e411dff623a270df15","3414a8c2f9a037e1540995688a310f939676497d9d86d0c2118ec57a53e60c3b"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684135818 · entry 108e9186e8c5677ac65b…
Expected log hash
aa65ff4939d7df1f40b93b48ba8bc57094c1090543a7b0494509e8f24b5559df The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788334509514","kind":"published-quote","locale":"de","page":"theme:sunrise/billing/de","quote":"The issues invoice was way too high","rating":2,"review_date":"2026-06-21","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a37e6d84cb7845ffd490ee2","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b3122ddd7ae7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.