Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Auto-renews with no reminder and no working way out”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2579634821

Proof data

Record hash (SHA-256)

33352d30efcea8d7aa5885bb30054d9d19bbdeda28c869742c45fbb9c2e9b464

Signature (Ed25519, base64)

E3n6CgBTeLL2aoUdqg8msvZScXw1+mcgquJwod0uRL3f+yveJlZAAm/UYkZi4QZ+HtI0NzkHK4qjgirc3OL9Aw==

Merkle root

bc9d0b5d836a216cf1886934c8d5ec9f854ad5daceb587a6eb8badcbb84ee02f

Merkle path

["333ba6ec08b91e16ebb0e5b2dd56a65250c54199ed8dfafaec3cc435cad3258b","8f30337d981339cd6048be80fa2fc6cb171e05cb6deb26cbf04110997367a16a","6fc88cb3749be69fa151a7cb3878fe99314a5613f2d12efa190019d554e39144","0e8ea093a152fa3ffca2680978e201952c0fb4d763a48398ae9118c192057bfc","27c31314543092d8b567853d5c34ba1ac58e273471b7c616dcb6118457e413d0","27976ecf190ae6a46e78f977906d7f834dbc644b55c0a27705a6ff793989324e","ab21cbdb8f58115377af652970e2bb88d07b852b28a18396ec5488d85386e75a","d6d1ee2fc5a8548e823219eebc35f84be078dbe34b4522ec238ea4379b670e1e","fc066d24d511e4d8dcd88bb1219b6990a643fff7af185d40c8f3adb6871be4a1","d403545499a1559d8c3773a1db0a30b4dd0c0999b95ba9c659472d2af793e335","af7207aabe8cfcd3bcb8885dbd686596f6db1d535fc2896270b7b54b3470bba7","98cd2a0cebbb333d2727c22ee691e457357bb7c0af2790cb485fbe8388d8df14","493d94f128e37161213f8d9bb7c131308a0f9fe01f8d939a7a3ac044af9f13ca","c78d02bc04c908a350115d0a3f5d200d8a666366962fbc37c05c5805c741dcc0","d687ea8aee79065a6ddcf3c31455804f88f0a27932c5abf16edbc09a81fa4670"]

Anchored

2026-08-24

Public log entry

search.sigstore.dev, log index 2579634821 · entry 108e9186e8c5677ae575…

Expected log hash

aa88a647802dcecd33319e67554ce6dc40636f337adca0214325bf9b390c4c88 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787544244896","kind":"published-quote","locale":"en","page":"brand:yumpu","quote":"Auto-renews with no reminder and no working way out","rating":1,"review_date":"2026-08-13","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a7ddf1658bb519c97586754","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (bc9d0b5d836a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.