Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Other tools work quicker and really free”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
39b04807a3335878faf4ec65341dcfca15f08b55570f1852f8531955b352cd17
Signature (Ed25519, base64)
Wo6KMYStOhXy5Ea11ZhYbkMiUOhp86X4Tn58ymsgQI+/LOhlhptGyYD77jKjD46xCnCRhds2Mx5WyOFglxqeAQ==
Merkle root
a4c18639252762e8592e52699d716003f75d0f7e56e7fa6339035d798c5faa4c
Merkle path
["39b1339ceacb6cb95cbb1adfa32a18fb1affbc5860183fb2884cc8077b071777","f177c5a48237dbea42ac6a1bebf0753c272ea0f89491eff21562e94160670d4b","3ae83bb1f8798b6e95e9c82e07a469fc4efd121ea56e3bc3f5054e153abaf130","bac8761a33f500ff14fed3b23eddd92b7ec664c43cef00bb82e3fe0631a326c6","9880d2a2dba1546016f4f93d907c7bd75dd4e20f318b19442d1943414da4c7ce","17d06add05faef140f1eec149449aef3223869ade3847ff0b7049409c78316e7","632dc76fc6101e7bf37cd43b0bc2e7f9581d06219a7c2aad2b1c2ba04f2339fe","19fa2ea60ba7062c53ea94e0433a61dfb47e86a0a7269f569e28c30267f30ad6","661b817651a5ad1142753adc5e122289c1386aa692b622a11faa529376e22b6e","4dee7912d268778bb4473ec9953f74463dbc63434ba58d7b91c9adff791e81d9","eed925acee1252c4d9dbcd4adfb163e12f5358dc4a01ee77f89954f3fdc347df","f347dac1ce226a962d0a4530d81c6aafb6552c514b9ec229241f40f2a30e69d1","9d2e9645affb5c31f794f4bb4484abc5417dd4820424b5a30790d02452a65971","991436b9578e675394ec672133d1c374d83d4a1e2c908b8f139d4d517c2af4b3","38817b8565345ec373a63f174b7c8fd25668576b72ed4022ed922334dd0dbde5"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582656976 · entry 108e9186e8c5677a65b0…
Expected log hash
918fc3881cd55f75123813e7996add0afe4b7e68bfa1a75328681c18d541d464 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787629605596","kind":"published-quote","locale":"de","page":"brand:pdf2go","quote":"Other tools work quicker and really free","rating":1,"review_date":"2026-03-28","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/69c82c42ddf757e150aac37f","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a4c186392527…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.