Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I can only recommend it”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2224c5bd08c6a8c4821353b28d6436faa41f8f397eb05a3b22da31e8d1d96f27
Signature (Ed25519, base64)
vRZoyTo5JaLroLDMzrpMUD4d1ASANRACrFEggsCpY8iTjtgt47K/9cHP8F9SF1YO9fEafDLBUfUx6ALkYMsTDw==
Merkle root
105661e0dc11eec81116882b16fd8acda1c827c70c95072f37f1e883085582ce
Merkle path
["2226cf67931ef68d695e92c8ab267598e38ebbc35fe252b236ad9b2d4b2661fd","66623ef10d58141339a9133fd5e16309134dad3302383ab819d300f583c24cf8","dfe0a345f1ee4384050387a0c62ac0e2b293b13139f771e85df11b892cd2d681","affc0c20106a5a1b6ede1a3ea4c66524b727493232c823c35c1afc9299714c37","f5de72bc0ad067ac9f40870648c68afaefd96a0d58c8a7cd92929658720404db","578e2f28aeb241f812d2acd0d1049a665639da7faaa44f79a0b3c386d85d871d","1f0f4e67879138b3e7e8fa5762f914743cfc2d249db7d4c276869cf4e1888e3c","a0ec9f46ddb129c8070accd97aacc0bb09f5f19d2c023ed12eebba91a06c2f99","cf7af74054928baaa84e62a67a7457dbe4cf1f06f80fcd900f932f30e8f29387","bb60c1c4c9bada8f1b8fa04b3ad64042c3a148683e2da61b0dbc3713f7b7c24a","2bd5f969a939dc116b9612a593392b8f8bda40669202840180531e566aa9eb73","30e4089b7f9ed05a2918e7c9d19536c624efad12494eede59f326e9bff577552","a13ce97d602a228d6f3744d88932177f5fb29e4b2aa193e896f5d2f631ba583d","b7cd78f72e1ff3ed0e5dd5efc148786b24a846e3493df91cde1b58dbc82aeeb4","caca5e74ffa93053dd1e9893a23cfa4dcfa7162e5f4edbc1eeeead1d2f6b0466"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582642691 · entry 108e9186e8c5677a5752…
Expected log hash
27172a9fe70fe428b6fe8e826e1330766adb69879c24941ce10f104786789683 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787628738977","kind":"published-quote","locale":"en","page":"product:pixum/fotogeschenke/en","quote":"I can only recommend it","rating":5,"review_date":"2025-11-03","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (105661e0dc11…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.