Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I had no idea I was being billed for a Canva Business plan.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2682182715

Proof data

Record hash (SHA-256)

308d8e3f162c0e74483ebb68d5e8c6fa59bf096607bb48b40e9fbdb171cc4021

Signature (Ed25519, base64)

FAa7ZbH7C1FwCXkQenktvWbqrIaV+6eGInc4YSqo3s0roEyziU4wSdeDSQpSY4ETaDqKvfFMaKsVFSzTFRwCCA==

Merkle root

a98b50e535ae53279e8516802157b424d2a2bd6800d1c251ba60d9a742aeac5c

Merkle path

["3087ae69f023369d95e63131c0687ae61b191d30b1bc38b358698cc1007565a5","3c2c68a930940a9eb374d1485e2008cff938fa2b3023a619ca665c0d8ccd4b87","54808c60e7674ef7db03f6167b96e27679d79c8d4e1ffcd515b2d97159536580","e90d16d2e316a2bcba5c06bc7f9f0e91d7db1b7a02402306bd45b90682c581d2","214fad0025008e81e80cd0af6c2849f77376623aae7cfcc47ab3d1c1e37c3c53","b9f1ba60d4a05a204e417b79987929be11ec10159f3a5068436d86b46489fad9","b1d64cfeaf8cdbdbfbbc4ff9a2e923db58d8a005e6d025c7163e6e4580ed8392","d8efe389d15e11af523fa51412c825022130bc7801cbb92b36fced6f46eeebfc","f5360383d69ff19584da5c431a3782bbb5543295cc7afbf9f7448cb8a84d51c6","c48dd2a1a8a99a29bae54a6761e307b64f4943624db34f041e6333f3eb03c031","bad68d08d3ca52be03644e25c923eb48f614acc020d020a6ee8007f482d0fb64","b45fd35fa02c6074358827b8cf04566b6a69c7917ec544b19a0d8dd032fd56ca","48c506ad38d4068d34d6051533c535cbfa87f7d67e37529357b04d0e67b03dfc","71a4426d4276c0c224a382ee3cdc207a0a9d5ddfd42ee86b341203278911461f","86fbf391c95a64b4edce12edb659c77256c72926a279d6981a94152c2bc26607"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2682182715 · entry 108e9186e8c5677a8f73…

Expected log hash

50527829b2727ec3ff54bbc04509435e1aad57a1b8911c437a05134629a261f1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788314008672","kind":"published-quote","locale":"de","page":"brand:canva","quote":"I had no idea I was being billed for a Canva Business plan.","rating":1,"review_date":"2026-08-31","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a95aeeb9c647579a290ba5d","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a98b50e535ae…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.