Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nobody is replying.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
48255e0515b7576c89f47e6c85403c414785e3a12c87dcfa11294164e4d2911a
Signature (Ed25519, base64)
VZorZdEmnkCzV+nXHFUG6E5LkIUZn/CDzUIc2tJy/EaVNPtKa2ypf4Gx7E6Jr+JM+0YHSlXFrUT2J2i1aZv7CQ==
Merkle root
199738dc68b66dcf66f6b0cc77e2cba74c3bfda88989684620837b4c4e64818e
Merkle path
["4825cad4bb912fa9a348b032571dd77be476290a4cafaf656f953ba119db3e28","f1f8f1e1a76acbf1f94f7d6eff5e751640e8a2361ce8979765b64c6f7906d805","ff1f0145222d98c9d1e4ee93c60fec0787c301d04975f85f5284fa406b0d86c8","3058c193d555244df24a4fb42f55b10ee52f1ec13ac4f5cdfc0e1ee0b8462fd4","7677ddf2c3e59aaff688b0ab6326249f5ec0ac13afb50700a32b8b3dd0648cd4","7585312e576b30929c1cabd17c52a1b31df238279c620f2e010cca53774a3cbe","0edaba25d832013b119c09eb74e30b15e50ddc54a69d90f6b6aff0158b7831d2","aa8ba6aa769a9c540ba49a09209ed72977dbdf4b579e0fbf20455f7c2f22eb54","f4f47bc1cf1a7ad636e8e6e087fd3b633e2fc31d9fb599292584b523270401e5","bcc89037a49902a3c70b26cf633524ec038892760424a444a7fde7afcd652bb4","4819cbbd871abf60ec554a51473e2bc17ce4d8ef355170e3a704c7ca1cd1c9ef","793a0a113c6896c3097aa5fd875e658514ad3a060dcb3a5d23abdc1b4da18d9b","5dc6942b342fad0953fd3ad3bc002a6e4d6bf8c4ba6db81c1c43744a0d2c9996","ddc8a66e59fc8f0934334cf08e419f621290129e658cbc58d8ec27bafd90b0af"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3198797320 · entry 108e9186e8c5677a14ba…
Expected log hash
46227e67415cdf5b62c43420eb8b7a80b35acaa912410c2711787f678b77c9c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791687727006","kind":"published-quote","locale":"de","page":"theme:lexoffice/service/de","quote":"Nobody is replying.","rating":1,"review_date":"2026-09-24","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6ab50f7b3a79fc1721495a84","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (199738dc68b6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.