Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I just love Canva so much”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2685518693

Proof data

Record hash (SHA-256)

33b5944b1fc9cba3288acf5b4e0fd6aa8adee08268f0f66c9e88845c9171a86c

Signature (Ed25519, base64)

RV7+Fd5ge3qR4U4XJhUkK6MUwzWdFhkreSjQZexJE0t4i8imJKDxQLeWLFkd8rZBNYJ4ZPrBYB+eZVUynmLkBA==

Merkle root

3750a5fdf1ed10aa252575b51301fecdfc7c400fa1cc1f2ff8335245da43610b

Merkle path

["33b5eb0204171179dbde039389a8efccbae12e88057c2a9f075420ef65a75d61","751cd02503b68ee4e0f4a94629f171b155e6e6005767740387dded5859ac1450","e01046e3e8414b7432313899ac5988b55383e78837ef4cdd02a4396ed17322ca","54b13519c22734eaf27b52538bf243bf688374fa0da6f8ab44b0c55d86e33fd9","d9c7baa095b3b33b58c1259445f3780d9858bb025b22098a80bc3a7d8d837f68","e397c790089a86219f9a2417c7d4016efd9068c2e63ccb2737c1a5c354edb2ce","209ace71542e97e10305469cecbed93ed07e607481bfb229bc66440ff0b8f01b","3c4820d5ded17246da2d3409575e6cac1eaa7cf93c1bba797037281e7f7c9cc3","16b4b2b2d90c4d7a1eef244f16f52c78c1d28b0947cadd4bf2ecef34a7d5a1b5","154210733b1d028e3641db5005fc8b5d8a9a676b7d09777de677f3d5e198be59","8592a4858e12b61f173f3b46d42a2e32b150dd61346b5d4de74005e2b02efa09","f3e91c539a5b823bd3dd810a09f3585cb5af14f485a442f648125acd7baac356","1dfe5acd016272fe02a085bf50e6510ed355c73b71aeb336f05812a4d28389a8","d3f60913f0f2261af2a1efa087a29b863f258046202db992bc2cb4f53d0bce0b","587eed16c1494c5b5ed63db0c99eac20f0d71c9f7de0d416e769324bf14ca737"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2685518693 · entry 108e9186e8c5677a840d…

Expected log hash

14b4c1422d781f8c06152e5b2b6bdb741e926e97bae5efd73712ab8c7b50b252 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788352576042","kind":"published-quote","locale":"en","page":"brand:canva","quote":"I just love Canva so much","rating":5,"review_date":"2026-09-01","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a9748d8ee9e4072e1f72b3d","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3750a5fdf1ed…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.