Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Terrible customer support.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3634bb6b0c603bb0d1185632cb94bc91a339886d389e0871969560ed07e5df66
Signature (Ed25519, base64)
4txFH/R0mFluBKMJMkKcr1faJ4T/YM2r3LylxLjymc3xt8PfNHhhp51xEImF9fHLXaXJJ8DkcSN/HvGy3pXUCg==
Merkle root
01ca9a914d9cb7fdb6291f3c0bffafc2c86f57c6ac9bbbe06ca1ea757b85fdea
Merkle path
["3636bf7f409f5702d108a6ece6bd12db2af5ea676051ff3a31708678e79223e6","87143e71e48eae4a9c80d8100217ff84ae5fa04bb89e5e1550e87a3b9c86e417","baf2ede6d6a87dadb8739534aca8f1f363f4204183319e7fa8ddf63080695642","81238143e935da6dc71d8c20187e307a90161ecce6d159e3d5ba775e9646655c","26d567a1157a14bde4e75d29fb1f9c96ed4b6d3fd3ff4a92da27dc66eaa5b729","dc5f77a28efcacdb316508301ecf435a1ac254d4385a6202c2bf4c4ef886640c","b3621fff04352dacfe393f9d8bbabdf8a31e81fb52560eb4dd77c6a9232ee300","e6c636133a5f88ffeedcfb8ebde4a0ad094b53f3e5347680326ea9d66bdb4ecb","7afad3854449eed2f00ea39f5e4ba94cd90f367cebe7bd1e2e1ccd076805ab1e","c6d72095edde26c7fba03556cc129b662285388d5494d483a5f5ae22ba34ae98","5eba31133b4ae4e810ac6afbbee2884153d3a3af6ea3d2c346097d3efec7c250","378897478164eb6b405871fe10ef2259e8a54449e81f83f0648f83b4dc410e31","ae0514a57ad2a12be655aa388f0b933f608173527da584b683cd1178dc4925b3","581f6e77367a390c6be41617812d1bc389d35491529f5e765ef954249e5ece06","e1421d191a62564ab151ed4f3d8990bb670a4cf79ef1b438c8dbf253dc424e03"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647682298 · entry 108e9186e8c5677af736…
Expected log hash
1dfa1bea15f2cfa02080ed204683ae7d0bc0936afc7a7dabbbde7cc96ee2bc57 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788066809618","kind":"published-quote","locale":"en","page":"brand:legimi","quote":"Terrible customer support.","rating":1,"review_date":"2024-10-31","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/67233436c7e42a4cc59c156c","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (01ca9a914d9c…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.