Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Fantastic software and customer service”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
526bb6d270fb6f6408bc0398d0de7bf620d3c2df92e1da217ee3d6dbb7b8ac84
Signature (Ed25519, base64)
ORw5lu3Qk+z0WuiUmfmB+Ya0sJvezZKDsmY9srdhxM95CS3c7vtTklES1PdPUkmxNg1RjRAkX76El5ENyosICg==
Merkle root
feb82b7f8aea18b46b248fac49fdc21a6b138fec64dc2fa12c4b3c7a81799706
Merkle path
["526fe3bfe844ff9e21bd28211041f20d01d2ced014ed627f0d9e78962f9b8b87","2001234501820e1df25235f52f36c64bd220dc31b120c7804140639ac49704fd","b9566375419a730056f72e1dc2493c60bab73ec0f2fae47d42aeadb6f6b34f90","85be8def2f084209f67e9e2610c210da96ea2f4f62f636bd34835521ac35623a","80255d52a9b8afeeb0b3389a9f66fb6689f417f62bfd4b84ef4c868c9d8b0d06","1188f3629cab40e3cdccdba2b36c70be2f71a76b0d60ca5fae1988b62ffbf18a","15120eb3703148b92882dc89724a13f0d96938657ff5d4d7e3358bc5bc47b8c6","c6c37cb5c57903e938f0d292550338294ae60d27cf29feb27d8bbf13c2395a62","f9f3fadbce9f6228ac925d1efce19734b276a89835766d83fac3bc6d444da0c8","37416db75b1bb9f760b9874c05819f2bf1ad84edce38de6aef5ceda30e0e6aa3","3991fa295c53bf99f5be9a239548cae510ddeae572b3909208c7c7f4982cf5e2","822f079723e738be80c1b41a6c3e9fb9fe10e044f470860c9cf6f60f80128a15","91cc006c3f424ecb241bd183a95a94efbfd8b798599a33a0bf97011037153900","83f42ac660298030039657fba665d1927c984fe4ba1e35ca5fa2b9345c12df0c","3520002e20f205a5e2c7683df52b5c77fe454ada68a85506f659d94f96d1078c"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3122521988 · entry 108e9186e8c5677afa72…
Expected log hash
9fa0d177312c5b0b22ba9dc313f3316134d71d179dc19912df4abe4610de68bf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791343163559","kind":"published-quote","locale":"en","page":"theme:xero/quality/en","quote":"Fantastic software and customer service","rating":5,"review_date":"2026-09-08","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a9fd867c1af9f0993b42cea","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (feb82b7f8aea…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.