Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The shipping costs are not right…”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2324fd5e09179d8979bbbcf8b45a6b3db9911e2102839ff2078ebd2885a3f353
Signature (Ed25519, base64)
8PLxPFg6SIkG8lRMPxtKU+FWNnMc4BH2ZI3SB13BQK8PBPlNvd6PqGZZYXYeMPIDD29enf/FgeDtSPvoI+hyDA==
Merkle root
49d75a7972dad7fc75a734f764cdbbaa106268e1ea0f657aa8c6fd89424d4b2f
Merkle path
["2329a6e0f4250a6ab70884015afe3f8ae92bb259e423f739f8026928b813fd91","94026c0c86df54cd9e7342f23b6d53498145aa6adc13f53b53c3ba080ed41836","9bba96a3f257a1966c4536562db207190f78b0c7bf09000511175f98e72de330","008804667494e0a269d73d158ee5699a02a643c3d8b73e01bd4111783e6cdb33","1ce355827c16949abdb0247e5496dbaceba73f4981fa33e88deb331eaa0afde6","7c321a00a48d3b077f5b08e4312036e55b50264193c4f3daed611a8fefe3b312","156e242dc4cf20d0a74ce73541b91c76dd9916a4e6c1c7a1a6ca1dcf3b26b9af","08b390d5679ec0fcff8477d9ae0d4f83ed46711db70e5e6cd1217daedcaa980d","68fca2cba91fd4f8287a9459d621b99a9e0ad88c53fa82b145b0429a2f58c953","f12804f73caa504e947320a4a6987f57a1ad0d305fd898f62b5ef1c3fcd98596","21502bcba388bab9dbb0db37c2dac04749d85af522003a395832599280dcf690","2a479129e3f9ed414bd177d34421da38f8cce5ee57bdcdf5b09ea16e2711962f","f930e87d5846215d9d33cbd2f684fd0788c4b25eadd845d1575c3bc708e059cc","79d6c858c8d60d7d4fdeb98d50012f464859bd3437e8887f9a62b641664e5493","75fe8695ca709a884269711b05fbdac24cc3f8930abb9087723ce2c8cfa8fe2d"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2681429093 · entry 108e9186e8c5677a81cf…
Expected log hash
89c17d1b707f92667072f2c7dc2ae2ebf8b7354f0952f06862b4ec01440c148c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788303366831","kind":"published-quote","locale":"en","page":"subtheme:ifolor/price/shipping-costs/en","quote":"The shipping costs are not right…","rating":4,"review_date":"2025-12-23","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49d75a7972da…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.