Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I had to reorder because somehow my delivery address was wrong.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2671180029

Proof data

Record hash (SHA-256)

1cd251ee861067602bbf436d19af27039a9c2a6a694e703f53e648030dcfaeb1

Signature (Ed25519, base64)

5lCOntTUL9lpSZ6eApE6qO8GTZdtLpyMFLbMWBBjXZf1CTznR1El/6pmqzEAv8bFY/sUWhANvBHbbXhhhW7GAA==

Merkle root

f9a030a573da3b674a3e48c677288390a434ca97a740d63af7477bb9b0087dd5

Merkle path

["1cd380d83bde9fbf56763500177bf9cb9fcbce260deebd976ed9f715526ef358","1b2912971b938150dcf0231db4489ade760eb432dc451156124f9d4969d3a5cb","e177bf4f50a94a1cdf98d9c99c80fd12480c4a84c9f44369438f06a8a5a7cb70","bc317fa836ba6d929e75eb2cfd77505b0a84310c4a55dd2f940e2021e2b7c407","bb2e1bcf0f671ef59e1b25e4bda05297f537933e4cb06600fcdd7609387468c0","250c6eca7069c4c58018818e29260d3b8f33ba8e0ea2cc94106839073a4ed5f7","6c072e399b81686e764c9086f0e80815ebd8cf3970b5d46a08d3c72b007b807f","bf3788480a681a86390911f02ec47ed8117def25cded8eef393d62bc7acac4b7","1f9c9168bed234c89085353d6a40caa78b2a3ae928f51feceffdea24fd04d24d","3f89d9d5f54cadf896dc942f3cfbf48127a95dedfb5f13463a3c07de33c1f769","6e49ff5f19e9d240a79ece271b633e849c6689f274f57252f6dd7879e9d0b850","721b1980334500ff79f164746cc4370b8af03fb6a260a1481482c786af2602a7","4ef2bda7f26eed09474d0de127a9ffbf5b18c0b39b7ca05e262a0cf569ba9981","123f459bb0d221b9be08e494016e3b59946d910cadbe6bacd03f308db88ffcd7","e08301f62b5ff22d13e806e4fd3e64913f665178fce99d41471461eca04be078"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2671180029 · entry 108e9186e8c5677a15e7…

Expected log hash

0c7ea517d47f4c8d05e0565112b0ba6c031576195cb596b9212fca396bc97897 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788233488301","kind":"published-quote","locale":"de","page":"theme:canva/delivery/de","quote":"I had to reorder because somehow my delivery address was wrong.","rating":5,"review_date":"2026-07-25","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a65174401f5c248e0b81cb6","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f9a030a573da…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.