Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Excellent app and support.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
32f7d7f28de3de634ce48451a313c820ba71cfc9110470310f129ff03a5e7b79
Signature (Ed25519, base64)
hqYYkc1hL/Qfh8Ym56Zz1dirPlFHNiqPTAMjuhsQ6RJIlaq9jM0MnQzE8Qc3iuutfxWd64iDjiHVox6HbiyCDg==
Merkle root
a4d47c2a34f6eeba31e2744fb1551fe9a0e34820dfc152f1ad93a68b24759c3a
Merkle path
["32f90c85a8d740443ec0fddefea13474088af68d1aa0892f6587ffb015b8cf8f","770a021820e2960752247e7452a764e1b3ce0d63338139a56bd3279a43b0f779","9ffe8d7ac657b992b1200a4100d0e57aa84144669f4952e937fdc149182788a0","63f5203397b2d0b6fd69cd7ece0c32ec63e84470c70c5afd2ddb49538e70486c","7b4ce69cc596303f9fba9ef27c956081ecd9330991a0fcfc3c0df46a493e565f","2541c2fa380ae88d2dcb008ed15226bdb6e12d43f3639463e37e3192c8995697","d77c17742b261c25c3c9805b290ce77aa80ee3a7fe33232236677e18a849f186","7a3a91868b7b260112a8031131edbf41cf648dcb875a8a5bb225eb06d6a1ac35","a828b1700067853120a039070a89b36b598c4f8a9873e174e7b6eea5802632ee","ea169aeba317f4bfa07d1e583c5d023787b42f31ab973ab9df27cf77e23de7ef","0aadceef0f0d856f742d189406dbaa3aa5c755ebe9fec69552e8b54169d5a407","349e15569e0a1f4fe3a9d16d01f014e54bef7124bbf1f14bdc15063bbedc0e8a","0d7c4faad4992f205f2c1ebb2b0e4b1b7e9d070f1f77d3f8d64b80626c324f46","35108299fffbb5c1a0d86f074b5805457d73da5ec7c848a19bc9a928f6a42a99"]
Anchored
2026-10-16
Public log entry
search.sigstore.dev, log index 3272274666 · entry 108e9186e8c5677a2724…
Expected log hash
d56e71820b4c8c62b755e9f6e3d2b624566d12db6dd1606e99ef55749400c387 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792036997995","kind":"published-quote","locale":"en","page":"brand:roboform","quote":"Excellent app and support.","rating":5,"review_date":"2026-08-23","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a8ae1430710ed27f8990c4c","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a4d47c2a34f6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.