Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I only somehow managed to get the money from the ATM”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3636c56208d4b163a331272714490b1b26b996b31bd6863fe0d69695cbf42e92
Signature (Ed25519, base64)
kXCgchX5MGly++kZyZmURqJx1wJRMxRggZnUfNJGykuaV7pXLMa6yNM+8U57ygIGcCJV13BW8bHhCtyyzCPEDg==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["3636c52c7c20502762b7e8d9b7c2db5d9cf5b350626da7fafbf987a896442004","330ea1fcf5404c183b2bd655a76f264ab694a8053f19e84053e288bdbaa1c92c","854f93ef5bed4b106bc5336b678944eb711ffd75cdee2661f4860b3874b920a5","eb916c831a7de81fbef3d64353d5621d9f0c7da9d55dbcf747a754f5dffa4742","b8f4ca802d2fc3241756d34eb2b18e65ae1c4f3fcfd1aabdfdd4a6fb510a77b7","571e27db2f13ad3cf72299e1900e4610ee665570fa284d4cb39a3afa1743b2b8","d5beaa32827e71a6af1e0c0c9b777aca46591ddce3716d9812085717d32f8bfa","8fecc591f8bedcf0be99d0b33a63b988a35c2b148fb874554d6fb0542a0666ae","03754ab036b4272ac16c40981ed87be64d0cea8a2bcb074c85a4cbad0f2b8640","05f59f2a949d5c00dcad2cedbca6ab57ff63b1d8ddc47ccc39f0d260c1318f06","0fe72dd7b884e68ec55a5513c27236320948d03fa4055189b9d524590e7969f5","abdb4cb8468fb2e434f199746ae463f161e11fc6274d5794bf3379651080b430","c68553b05062bff5e92df6fc931b0fe41827a2af51cd30b80fefce371f89e614","1f7b489a0f1f52a9099db1823d706668c4e68c1e17b4e235c9596001eb5af1b6","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"de","page":"brand:yuh","quote":"I only somehow managed to get the money from the ATM","rating":2,"review_date":"2026-08-16","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a81837f8c551002ff74155a","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.