Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Einfaches und übersichtliches Programm”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
453cccc67dd449bce8b69191199ac397123645ed40fae31fbcb1e3e9aa63fd7b
Signature (Ed25519, base64)
VeGRFbJVHMLhy78+HAmgaCu/+nTrDxT7W/vUqr02Wuc79x8tFYOrwbjtS7HJyT9PP8WznzLgTGkiicC0w0QbAw==
Merkle root
a6a2b4c9d7d1eafa4a3ba3595aa08f11c105165de84940ffc059f837c445104f
Merkle path
["4542b919214a0b51148e6a2c9b62db04a7cf69f2b65cdbf3df99642084b5c80f","d2cbcb5af64c5523f3045df1d80b9dfe46346294aec2d0a5796323c057959c91","0d111f9d96ae3150802150e02e4cd3088b5c095b04ffaa6cb23ea5e423706735","f2017bd390633f1d3891cb641df136d445075a17c0a73f3579bed54091ad6004","574129b3e05a7d04d3c45a81986b3bf0436be6fa130d9cf97ab4d78b2f677e79","3d800f80cea740dc66061929dde8d0b8bd855c33d5c4b75a574dd9b75fd6e183","da2a312265fa497164e666c46d154dba29bd2cfa13bebb2cb99b58346591c3e4","adfd57144a6d9cf8369aba051b70a10e5796017b27c038f1b08ee30c71826721","d4299540b5cb1f69fd6832fa35605c8234e9bed49f3d1cb26abb52fd007a756f","d984f3009145bce26c5612dd6cd2f061bf785cea9d89942a1c0bd2007494515b","bced1a37bbc0af3d8e952a7c1ec7b33a02d84014ccd248303a3b792538a7088e","9673acbab717662371d7b102fec46b7d359ed0f02d02ce5d555ae75d9c60af2f","95302ff16156d5e277933eeb7a8aae0bcc9cd9ecc1e7491c1aab462ce098abfe","d9b9cce27629bc902030340ceda068fb90d53ddab20309d3b3d8bb3949c170f2"]
Anchored
2026-10-16
Public log entry
search.sigstore.dev, log index 3273342496 · entry 108e9186e8c5677a66d7…
Expected log hash
8a8ea4260f3039926c3342603d4fca7ca9e5c627d841ac1c7142e303a049d0c7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792122420855","kind":"published-quote","locale":"de","page":"theme:lexoffice/ordering/de","quote":"Einfaches und übersichtliches Programm","rating":5,"review_date":"2026-07-09","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a4f9851c14b4596e05b75b6","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a6a2b4c9d7d1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.