Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I had to call three different phone numbers”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2632025295

Proof data

Record hash (SHA-256)

37c3fa47e5d14c01d84eac3225aafbac8fee64b9a682be3b0804a520073904ac

Signature (Ed25519, base64)

pcIVTYihEdF6TbMnPuvhtrXMTDNvmSthu+9AjJg8FHguOUXk0OzPRmk6J4oxhEk485Z3ktDq22pkR0VP7lfTCg==

Merkle root

fd6fca9e7cef37aada941aac92decfcc64f6ccf1f80e46f326058d1dbea3be25

Merkle path

["37be9ec753503e931477d6c34e4f318cc09d3c5bfb3fededabda87b72ce76889","b0cc5ed77c891932bf13a0501d0a148ab05756a8fd122b810be047772d6eec8b","6f955044ccc239db067d70837f5add6bf4ec2466159757076c38503ddf257bf2","7bc6314619136e445988f9960d33db009c9a52d45c9e4a0a69e4a340d73559ec","2aee658a2d1add725f3f7a8cf154318a3fa6579f0330aefeabb2d718876027b2","e88df00e73b040a65f5a71967b620d4632da4af3fd54f5c07781db9437627e5d","67245abcd547c28600758e05afac17f84b54e59c9f7c3ea38e726e5bc517a549","e37d87db35769c2c586244bbb60f6afe029fe202e0af361c6d948c659d1f4bdf","3730e3556ca158ff2b2393b54ce3f30ce56bfd4784176de1a37f18e062a455e6","b4a99a0dbe0cf6543493b599dc4ad72c7f14dd1cb012f38d4fbf4e7dead614dc","7445338296781921ed2de26bccbd677eda77c59713cce3e3a39f13f83754c4ff","b7662036da600dcaf55eef62bd3bc57ebce4328e121701aec5757749fe32395e","91d6c5ae04d3a04b4b770e93da7c2b24ba5b08a5e3c6bfabad201d2c2bb2af80","af8b7672f7140c4d5f8cf5a204256eb8a0fe0ba6770180d832059e5b511f691a","d2a30b01208ae5f7745e5c8a474c1f34f9628e43b7a0d1b0d1ac6b378b7f866d"]

Anchored

2026-08-29

Public log entry

search.sigstore.dev, log index 2632025295 · entry 108e9186e8c5677a7e39…

Expected log hash

327cdca6f67e0b8900de427ba632e65f297b0edb716ae3a08de15ff81c0cf3b3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787971088504","kind":"published-quote","locale":"de","page":"brand:salt","quote":"I had to call three different phone numbers","rating":1,"review_date":"2026-08-24","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a8c3d79c4093177487655e3","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fd6fca9e7cef…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.