Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Stripe’s involvement in a subscription payment system where the customer has no clear or accessible way to cancel”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2907673729

Proof data

Record hash (SHA-256)

2ced9e4e6ec3c49c409d3887b43d6012521bff8ea338c527e55d2540c74b305c

Signature (Ed25519, base64)

A5ZL0iCyrgHe4pdTlfFahBCXGuylVUyA9LiJk2rFrjqRbDvybb2F7WrIU1dP/8D0yOof8QPrUsLng+UDoWk0Bw==

Merkle root

b9a08f9d6d76dd148110a496219c42cf3205c6f982800d84d5c85d77e9461e02

Merkle path

["2ce7c6cd1eea81568ceb09baf2b07cf5d444473a7ac01082b82c4fe7cb2186f2","37a27f40076ad359999f0f451c2291a153fd55b6c3fd63d6743ad342c10a3c6b","81bf3d273c0257e09150ed07653729b49e4d9939e85f6e02a90c29368e44640c","7709ecb44f743ef4738e664219b5884492bc756ce958631f00b308f910328ab4","a1e6ed4c00004ebc576d8a1473c55ea4c86d9db7881904aae6ab4cfa7b77ad29","3162eb9c709b9c2516968e4392c5065003b8696301be64bff0c9256769ab2afc","031a08da63c29e1b1f5e33b4f0517b8345c7a79ca1cb58cd64b42c9ba494691a","93c664a6df7c39e34e1f50c6c46c895e3bb60c50e4bf453077680746cdac33d5","9c40101f164b7481b78d02e6d4590730f2af41aa9167829ce433a67835a64466","a4f63aef9675334f37c0d836196ba77418eebdefc05a2de733d60d78cd8bff9e","fb2e37e7dbed9db223f5ad70359e5e571e728737b5bd0b91b2b4db8ad5ca71e9","c7178b4eff2fba3e523e57ffd27d883eab0b92aca9ab4febca6b4f95755695c8","17354708d69221dcc11d442a2ae8d1a8fd9ce3422f52e63a29a599e2bc987d3a","7a4792c9dcf9466d19ba61ec3efd4f578e21f2d3035e8fa6a6264d3045083f7e","43a562d6822dab12c673c1efa0a3171d1ef69b949f676fb01847e1e5b56274de"]

Anchored

2026-09-22

Public log entry

search.sigstore.dev, log index 2907673729 · entry 108e9186e8c5677a06ea…

Expected log hash

bf9a74000249ba6e66b1e29aae9d8cb95c3400dc118569a80e5c0949f3e8ac62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789969984102","kind":"published-quote","locale":"en","page":"brand:stripe","quote":"Stripe’s involvement in a subscription payment system where the customer has no clear or accessible way to cancel","rating":1,"review_date":"2026-09-07","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a9e61ddace0def06c41943a","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b9a08f9d6d76…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.