Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“A trustworthy App to invest in Bitcoin”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
20c4c9383a8da0004fc9ebc2bcaaee4be2f12907f32d7b809463025a5641cac6
Signature (Ed25519, base64)
5729Z7GHviOVtuucIOCI/83/FA20nxUUhi9Q+mTwTdXlcYMHHBhoMTKrTtZgYLDuVsbc1o/YQrb3nF4pKASICw==
Merkle root
390000a3da07561118bd9d28deda7ce840b04bdfb545028aa4a507b52bf856fd
Merkle path
["20c746606ef48a0d4f3ad36e32de4ca748ff672a3e977929415439b227a1637e","1227f71abd9a5ad18365d9aabfee249b95709b84a5cc1eb3da30e2b86843030d","90be35e6b6f0be0356191a663a14c2f4c88cbb0209d48c86ce4613fc7cc056c2","3d6939cf63a54739f3ceb614b018a9f409dc68a56f51a4814df570ca20d3a6c3","fdf8a68d58496919708c5f3f5bfe530fc3ee4c55a5a11201a8c4e3338d54e979","8cca436c4a6d4ff914f20eb940dba3c8ee7fdb5c7618149e45708dc085867e28","2f0796e07bf99ef825771e0f61196149140494e5b8ad41a6000ef0f2cb35684b","71267cf27ff52cdb2d424635189da6326abf88da77008f53dc2578a20df157ff","da2b7ffac6331fbd74c848af897806b44878616b556bd7c7fd18877a43024bc6","882e582bd631e25a44903382c0f918e3404857c251209c2ae708ee78fcecd788","65c58c07d62d610f128bed98fc7df74eb2b8aaa4264d4bf7743312899ffa63cf","5e0d5d2147fc79ed08cc9756182839650acd3c74e3e819f1544a56a6d3000127","4e738bca4cee064274a4b665fd9e4dc25fabcba87d43997253660def0e543931","9dcfcb4b16c40fdab070f8b5e8f7ca37473a8c41d403ccc54087a606ff297679"]
Anchored
2026-08-14
Public log entry
search.sigstore.dev, log index 2459832256 · entry 108e9186e8c5677a8f51…
Expected log hash
79716a7239e07909ae68a0cdb6d9bccdc01078dc99c63effa81b2a3fb90ae394 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786675140122","kind":"published-quote","locale":"en","page":"theme:relai/quality/en","quote":"A trustworthy App to invest in Bitcoin","rating":4,"review_date":"2026-06-02","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a1ea802d57fce65417f2660","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (390000a3da07…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.