Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have been scammed by pdfFiller.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
30878b616453bbe70b1dbea4ac3fa9ebdfb5732bcf7be4908ee97bc6bb7707dd
Signature (Ed25519, base64)
HPIGvSymtgBLDY7+nrZYN/FLvi9zIjc/EzHq/oj7hWP9hzmhs1tZX9SiI+NQQiO4Nt65WVmT/eXCk4Ta8aL9AQ==
Merkle root
400ee8bc8bb6e48ec8bd5ac7598e893e5cb7545daceec4f0578b6b1d061e7911
Merkle path
["30852b030809b3cace8b8e24f3f91208d3c3e76bf42f00b6523f7b96d157216b","44612363abe4dbb99d25b83d224cf81298426611d52206d37cf5862a498d9e16","d2ca2bdb487cad6d4457166b0774513d78218b20806a51c0d29471a8c0188974","0a46304152b8917616407f870e5e4f028c13c4500069f245e08536379c083b40","bf23b9c47c327be1924919df80ceab225714acaa3d15b1968dab3056f30dd1f4","05e18ea69a397579aaa14a3fbb6da6dcb1b9e83672a1996a6d29a9cc7aedd79a","2b4bdae5163ce9d33955ae47d0db75a9250ae140b9988e2f0e2d7a5e5ced1b71","b4b8f5d727a7a0a7f37fed35de4d43bdfe1720e12dcf4c884a33a5e9dc8f3b36","97cb2abc643862bf442c1055a99c8a2742353c5f6608777071f02ff22b7eb3a2","80e36bd34a7c8d78b957dd6f1a17976f5e640227904dd46b583f1fe0d9475e22","05d8733660740b027cedcb5998f454a5064d0a35965fba3c28b1330e9ff2948d","1c260934ad839e3752daa759b4a570c4960f3263905f31ad5aa7610622752628","81e5928bbd5026857bec085d8693993066d3f6d2381ee910a23396515bcbc310","3e875c75273cb6de71b32afeb0515bfc68d941b50d1d4d965b5eec9b8f79e681","da3c78d15c3e7e744f2949813be9d01fa753f12e538edb94a65a960b11043d47"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3082153890 · entry 108e9186e8c5677a31d2…
Expected log hash
cff4076b1696aa395d1840cc38c433580d1b7821d298d64e1adff5db6503370b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791175845570","kind":"published-quote","locale":"de","page":"brand:pdffiller","quote":"I have been scammed by pdfFiller.","rating":1,"review_date":"2026-09-04","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a9a62a4e3726e1808412c28","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (400ee8bc8bb6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.