Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it renewed automatically again this year”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4668fd28aaec626ac5fb0da7bbc45e787a0785e28cce88faccdf7464c180b228
Signature (Ed25519, base64)
STtzasZ/rxGHvmtD2wcLO4zJ1V/ODEionEYxnKws5U9tSEvgUU0jHeuLY/S8XuwWsEdiCRa6xXkQimhoEfzcBg==
Merkle root
3b072629e9b16970356829c050ce27926428f47e05244a6512bb40569787f050
Merkle path
["466b2d143df51cbc9e683b5abf4691dfdf3705937aade611aade0696fc32d0d8","50a81c374dc99c9fef43b48af62594d3663926be90b87557fcf851aa0b090000","2be4587a89bbd3f156f1cf849a7366aac89d448dfbbc289e978d6ba300244d3c","c739f27a1843893eedecc6af384f14a6c42b82c22ecc4c273839258b8593fcd2","bfc7ecb8111da1a18f523ad12ccb091c9853ff3aa230b998e1153c2066557b5c","c24feb1de6cfd62cf0610871b274517c73596787cd2f3007cf86a84460d19a91","7f4a9b2f5a1270f51a42a178875a5c0809caaca8365b3f4373999fccc72dea5e","5ac5f8458a2a2813576a394651791ba2964e92e0bb1c84a59cf4e0381e81f8d4","e6f49b8b3af483760074be2e1fea28b7ee244d11c65f45752d46d17868ab8d90","bdde9cdf57226f746aff0127967fa47338249a882c0238bb8cfee2817b148088","83bc7085ba5ce793e770cf811824f60de5f2168ba5e7b2d20a974b7dc9f7759b","5feef90d8231208fddad87df3626506b22c63699fa1dfad82f70ec24f4a10522","bd647c84f5a5709c34b7ff67afe5db551f8d36ed60e852beffc039c8af7bf210"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3668531329 · entry 108e9186e8c5677a190f…
Expected log hash
70b428762b7d47d774fe78d442b8bb17fe4b721cbf1b3e9cb1fc9c9aac05be8e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793706202681","kind":"published-quote","locale":"en","page":"brand:keeper","quote":"it renewed automatically again this year","rating":3,"review_date":"2026-04-04","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/69d172a66f3cedaf74240eb9","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b072629e9b1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.