Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“i hope it really is free..”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2eac0ef2906eea98bccd7649aff7916a2c6329cc5bbb4de1d63b918689d634bb
Signature (Ed25519, base64)
fxEwNbp8iTyobXmS6RKwCkmDlIG0X7Ix6Q3sIPcnzcEFJrGwaaa9MnOLOyaQQeIZDnxgnEfawvIZpGN0ILjiDg==
Merkle root
c9e6077a1bda893f1455402f424b1d526c8cf2f47d428b611fd8d7fd8b45f80d
Merkle path
["2eac7779d5847a9a48149a1ba247118f8149b6bccbb7814efe7642fde3543ae0","2b928e4e71caa8756720851a72cfb4315393eae5726ddd4af97f8b0e1297b95b","bcdf65ccec3cdeccc311891eaf1627a2597a7158bb9fc562ac52f09a9f78aab3","d68a89b7008601da88b2f9939635d31f8dbed25ea323ea4480140411fe8f2f4a","f527325b3064b1384c08e3f36a235b054cd3924882c19da1e680e23beb8f13cc","8087d3f81538ab13ae76ef4068dc8ae85b988164e40bbe11d3c51e41d05c7c11","1340fed275dd1e1cd17f17cf3ca198638696e61939cfb5bc706ce580bcb16080","650dc1f32f7f93e682256023fdebf745347b6e639f0cd16b8faf2f5938c8710b","cf8048f0b9177c2a1b5db7a678bfe9fe90e75977c5b85ff59a7398fe3d2d511f","833a75b06e3d4545b6e435307d6ce78cb3ed965b4126695b28078ce3882ef858","d2cbc652790bea6b631cda4432fd44547d433c3f32676d6241e8bc46794e970a","e6ffe9b99a14451f4836ddc129fa0e0e82ea45bb8ddfe415ba8be9389dae2537","13426c9a5d28f51d7e7b6df8098d9a77a705d964d306f1e8144eb70897bb0dfe","28f339129afb618d498bd82eae2b1e12eeaec1028ad92bd9db24bb82ce8352e8","5322c97ccb72daa49a07d25ff9fa0bd42fe425058f30f6fb1f272a0b90ad3b60"]
Anchored
2026-10-01
Public log entry
search.sigstore.dev, log index 3029042635 · entry 108e9186e8c5677a4403…
Expected log hash
38d9b7e95b1b3c998a8128983d818774fe7ee047adb6f05ee608495c2d7aa418 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790741815621","kind":"published-quote","locale":"de","page":"brand:pdfgear","quote":"i hope it really is free..","rating":5,"review_date":"2026-09-06","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a9d9911fa4b0d06e843c672","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c9e6077a1bda…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.