Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Keeper is easy to use”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3668793196

Proof data

Record hash (SHA-256)

46f74c4f47ce7dbb4d8220a1d48523b82fe46038951c31c056f74f6100bf404a

Signature (Ed25519, base64)

JB66d+jdPZ4/8ABSzewLJK1to2nGBKyR6pxuF1U9ukQl/F6nZakNk0bBxZyuGFcCTSWcOs0sqHyMzGPmqys4CQ==

Merkle root

8552de27836d9c1d73f2670cf2bc11df6459e7443d47ace4674278484e3a6d8e

Merkle path

["46fa346a9fddf015d3e6a3875a4950abe58eae4f1f604c58ff12ffb08c86eb8c","5ca595ec86caca77d314d0c95885ebefcdf7cc2902b282458ff74203118061be","b27af77c9ebad81b7f125e2197cfe30d2099bacd8110b59b102839b453a2471d","a651bfd419b5d3aa1e59852047796eff82d046eed1439388f09239d998c06e82","4d0c5afdbde3c54c2fd16dfc7fa4871cdbe4ed93be131d70b63f77c6f7ab38fa","2e0f1b3c3924f409315dfe5ac2b0223e0f32554a03b0649175c6fc5d8f472760","aeab4811faab969ae7fbd40550c6f426406f56092958d283f79432dcf990230b","9a92c21ce3e1a85cfddb7ee5afb2d320e927d420c90a89976accedf72b7888c7","d8a61ff0493672f847225624fc1bc7f1fd586ceacbd077f6dafb28a4b02fcb81","7fdd65a9a20f70443524882968c7ab8e25b95dbe675fb38a9de77655a5c5a31d","904ada4e02e7a9ec661497dca0cc62df47a008d441fdb71d92ed6ffb4e1340e6","45057f17156ec0bc54320963b9b45c71ce884be753e46907ccab0604a5fffa2c","06f625e80da47a14c2d3e7027b88f7f89c63e459e05ddda58b98e60b36bc2518"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3668793196 · entry 108e9186e8c5677a8c91…

Expected log hash

f099839a063ebfd0b66050d615b9645cca5be77075ecec449f1aa0148fdcbfea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793706932685","kind":"published-quote","locale":"en","page":"brand:keeper","quote":"Keeper is easy to use","rating":5,"review_date":"2026-04-17","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/69e26d00794d8e7bdc1022a0","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8552de27836d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.