Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I just canceled my subscription!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
46dea6c98b3405454d90734d1f63c602134c6ee5b4c5aea9dfdfd64ac763739b
Signature (Ed25519, base64)
vsebevDtI2ph5MMO6bAdEvjvrbg5roB1jb92V9quO52Im2i2ax3yf6+zNIujGKCGDX9dqDhMyEzW6XnKG0g1Cg==
Merkle root
417e79c5636392fe3ad064f685f70971e5d532c1ab257f052022be5e8b8c0dd5
Merkle path
["46dbc2de227a492edf1fc05aecbf06195c8000f8d3b73d20c4dc99a7a5eb4878","abe13da95ff81b4f2ca400d39957ace429eb59b6ca6f067c51ea70153d1d7f9e","2fa62696b7bf52e04656698c5d2de42510b9305de860f1d9b6cbea3d69ea85de","47fd7d126c873ad9381bdcac5db9fa9b4a321a9eeed043795f5413f6291ed892","8ad1fd9d1135fff07062db78bdde277a1e40dbcd523580bcebe2cb15ed941226","b46f65dfafa14143533c76dc22fb75e8a140ed74d284498535bdea02e1266907","fcfa18b7d647ad13ab832ef0f3ebe63f237718367366fa80e8558230d8d2d15d","5b833311c94b926e7d60f63b693f370017a40e3502dbc1077a9465a1e98288b3","21781da3374a3a0b465ebc463493f0299002d6fe5216831222d4002ed54e0bc4","dc70906be22146dc22abdbf70f0dfea9a846a7a3e7998a4995c25a335de41464","71d3914470ca71dd4f06df16d7c9bcad63ef10a4075b2b39691e2e6dbea95dcb","be60c6901c0139765faf2ac0c808c7a5cbd967c6838be8c04050584a567b2d16","a3445df7b332a2879d9dfcbad4af79652a13ea138d6afeb81448d347f1f2d128","57e0ae13344994ee6a0ba58ca5aa3276e7427d3c63abccf6f53bc322580decdf"]
Anchored
2026-10-14
Public log entry
search.sigstore.dev, log index 3247957099 · entry 108e9186e8c5677aa2a1…
Expected log hash
86fba1d35010991e0e45c044558780825516b744aa3dd43e559455260fbef42d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791946591199","kind":"published-quote","locale":"en","page":"brand:everand","quote":"I just canceled my subscription!","rating":2,"review_date":"2025-01-16","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/678874b7ca6eee58ccccbb25","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (417e79c56363…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.