Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Setup was quick”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3258201873

Proof data

Record hash (SHA-256)

47b5472a25e80ec6183a980de607659058ef174fb353d38daa1d7726b1ae3791

Signature (Ed25519, base64)

AvHDB9jbJ8ybgBW82++YQFL6yWIS7kGnXt/ZTPpkHNgXPrFBhkYdUlAB20ikxxoZGwt0xwkAK1+wvzX5esu8DQ==

Merkle root

07e2d0de1409df9008c16531abbe2f8515ebe8e55b87a042e18a21958771618d

Merkle path

["47bee63ba8bc2dc709558f34483b95b2acf52adf964c1fcdc58a18ba59f19f58","c5292d84d22dd1730e5e89b60a166f02ca9aa9d1feb4c771433854743907d0a4","e0bdda8826f00bb3e00beb99f6bd2a186d6504093e9bd4f8d8baa7924f3f64c7","3c799226e4c5253ec39e8dd44ec5092ca9eac0aacb16a56d6a6ca72045362418","80b79f249ab9133f05faf36ad9dc51099e865df3e22ff8ba42ba4e67d7fed888","85ef8d3b91b948f06996428f17621c56e18567325c16ee76341ab4c921fbb9b2","e765b860b24e0ca3794baae1dc707d31a1856f13e6c5253b79d88c957993d280","543d8c745c4444980abfc5a0f26c8aed12a2013e56a7b74ddbd69b9cd52ad2c2","ff599204015ebe3cc5e4addccb965da00894e236d552580c4a8f296e874f9d60","397774a250c6189933f7229d14f69d83333510b67a9bb6a30478504f41b4ba7d","a33f52125c92d9dc1b49433c16365af7aa32ac81cf46a8b804a462d47c9d335f","4d663f5926241f266352195a33380a37df27997d5729c36639e1e95dee72a508","48799695a25196e19e6c0bfac80015199da758df0acb5108e4c517a5d6bc016d","fd7778befb9f979134b4d8a1dfa78827e64c761abd83cab9d5ecd5bc01d8ea14"]

Anchored

2026-10-15

Public log entry

search.sigstore.dev, log index 3258201873 · entry 108e9186e8c5677ab04f…

Expected log hash

205b794967d70c4ec2534ff3766e47506acf44c7c68740049459394876120dfa The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1792030899870","kind":"published-quote","locale":"en","page":"brand:keeper","quote":"Setup was quick","rating":5,"review_date":"2026-06-06","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a2403f959d197e3be4fe7f0","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (07e2d0de1409…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.