Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“SumUp has been amazing”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1b71b8a669f328a16c00cd88211fa326f82e692691e2add8b91d654ae3303122
Signature (Ed25519, base64)
B08/N2pxfqWVKkrxbZFCPBZHE12BTdZJJLz5fs/AXeWZGCALZ5A01zIjTvxv4CLxByB4myhlTp9K3f3LVKEEAg==
Merkle root
dae11b7f399fa27d7e91aa4463415971ac3f4413815a3c608e4b798805e78c60
Merkle path
["1b691cb08c5d65e7fd719d04164996f3e46ed713d70f908055bc1f88f24fff2d","7b0c7db7b64ab57a63d475f587356cad1b1d834b8303409aa61e582d0e0b7314","de5cd918d21ae782d329ad029f15b13c4ddd1d3eb6c45dc2b5df46a098d8705e","9ad2b4febf2a93df22ea68a02c12ec704b74c166df13b8bc265f471a18736437","27392b3223fa841a3906a7f076d50211c93e274411bf29809c36a89e068d562f","3949a50b62ed9d18e5c193e77fa7da0f3b5b08a6bf3ec857f1890d57c9894273","630b0ad71169b0a1d812304f8c2819d2e3156f03689d651c7af39ed5335ea65a","da43e09d914718d072244271009a85193b3bbd82ce39360659def4054b21bf5f","6d8b5f4b76f1cb80d13112530f9570c92ad089980654f19f6ed0e1e8cee7bd90","b3802765674300064a9b228104a7c9947a3dd7480d0f6fa05e9af2fbb68d1c10","77642b0c9892cdc8c55c060d52c1a635ccefb41f6f9c50eb7718b4397641f27a","d28b518c1e91bb83feff8340555603f363c583d1320d4d2a822f1097a3b82d1c","14af96598cf9d6cb016b0fed730fb6c3e41450ab1c3ebbb7f845ad928e8a42fb","29fee1ee29171f2526142193c918f4d151680a806133c34179179c2fe722d806","6771b856bc54b9b41031b35ff7640ad54c5be8f800e1967d73d242437a9508b8"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3161668256 · entry 108e9186e8c5677a744e…
Expected log hash
dbaeb9745833827bd692133822ce98bad4dbbf6d52d00fcfdadfb4c533d214a6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791537031439","kind":"published-quote","locale":"de","page":"comparison:sumup/de/vs-worldline","quote":"SumUp has been amazing","rating":5,"review_date":"2026-10-07","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6ac57954df7990f1219e4121","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dae11b7f399f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.