Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I had to reorder because somehow my delivery address was wrong.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2647332298

Proof data

Record hash (SHA-256)

214423ec49c9a1c580be8b7c778404ffeacb1a9ea99ec2b659ab04b035198d5d

Signature (Ed25519, base64)

dci0dwgQwxPDF6tyBMuriokDhGSe2zp07s55OXEyNqvaLQnP5/k3SI0MwJOHvGXm0u9AZcxpPRE+wsCvBkDsBg==

Merkle root

f91c744e1108c1bb1ec3259bf4dd752db9e3b06ce3ca7c817c48f3174bb949cd

Merkle path

["2144231383fb0005b8fd47037760d19f859639cc335024bca61536e4ab26fa8e","b9ce4ef59874adff6c855d9970776d2f2476406d09f0029875ee56248431b88d","e1fd10cc397b4c42fa5e47f6430be41e73b0184619bea009b1bca0aaac12f3d5","9311bbdb41545f7337fe376db9177dc8fb7336c6a1c182a16f0992d7156b12c7","ed6ee39356c4bfe2245ddc215ce5e1a589f07dd2719d92220966980458b7fb81","ee810c6b47799e34d808691f0125bd4e3f4299f71bb8e342f4812831cbb83b7a","62a20d69e82ce61f71cd8fe8cd9600075b8c959f1de3875253a1ecb9e1411e78","8377e79b1b25a35cc95d3a5555e8b7bb3a7d351c0d2c0d8dac083816054a8a17","b9edacd7bd1ea0c4b21619f2b6eb3b8ff0998e04b7cc576a263f11c52f5d9ca8","1466dded01805ff8a356669a55d175cfde7d0b0918902842f0f294faac59dbb7","dbc727192f8267dbecd06640b1521583ea1a9a189b32f14628b1ecb92c26701e","75e3e34f8568f793dd8573e6b9e7ff586b17abe08cff7e4d83494b07d2840423","38add9619d9f1ac1a688809de34787d9c7d7b4d2116d16ab225a1d2f875ff278","939bb6f35c7a9334365aa0f05d437301f5b11fd1649b761216a467d624b12d5a","7e33dd613a6ba5c13ea4ace578351ca5e0375312f966275d25485ca016b59318"]

Anchored

2026-08-30

Public log entry

search.sigstore.dev, log index 2647332298 · entry 108e9186e8c5677ab309…

Expected log hash

5d995478a14ac45f67e2121505e769136cf509c045e6701e0235a25f639d0a15 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788058735671","kind":"published-quote","locale":"de","page":"theme:canva/delivery/de","quote":"I had to reorder because somehow my delivery address was wrong.","rating":5,"review_date":"2026-07-25","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a65174401f5c248e0b81cb6","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f91c744e1108…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.