Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I contacted support three separate times on three different occasions, but I never received a useful reply”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3220562278

Proof data

Record hash (SHA-256)

5514460653ef388e4f4d9271db3ca2d66e7ab4e465990c831087128f199b2fd9

Signature (Ed25519, base64)

Ug9XA2tbo3lG//OMmt/i1tVLqAdI2ARc5yPOVffG/WNGcAUXw68gfTPys8Jz298EvSsaN0WWNw4ZVHwDX/9xCw==

Merkle root

2d214bb14438515f4bedf5edd9b00a6a5113a016ba9b9fe8160d41d7e6046722

Merkle path

["5515d8baba9271fa58291b73a537ee18a86275302c395d4d62cbfced905c8f87","818bdc6c081711c7bf235b11e6c973f0feac91758600a016219d636629605cbc","4ae15ef3cce6805df4b185fe1521efdc17c33d4e00aaef09f774a2e0278e14e2","e4a3d17637e6ae6fc89ce5b01a2ee6815775ce711d2f5da533fb558611505c81","3ec3f0c024d3c36a789baa9e257ec8dab045c36512b3ce2655d24584a50a7f7f","43465ab11f176fb6c478249ad7c927c0183466c2d7388d3592afb62dde93204e","05cffb038b221e5a2d01b63b23d030fae9900629871427a2306b7a23116a3b0d","041d35667fe20e7985c9c550a257bba163585bcc527ae68af9864589f99d1d4e","a0aabc2a413997a3df0a8f071aa546d7ec1c0c0e00674b90008e3d9fe310439a","5a7e4e1a963dbccd6dd1255a198cef96d5695bc0e8e7231eff36c8b88b0ff339","99018faa5ad0d28664cdf895a0d291f9e9325e68283ffe73dba89bb27fc962ba","23123a46a6d30e0fa59a691fbe1dcdcf32ad32c111bb8e37438ac91b1152017e","184cc1e2f93da59337f7837161587a67303bd364329773d15b922bec0848e3b3","35ea2df06612b261a549235c4e62b3e1ad1789f05da56f9ca671421e5071b72b"]

Anchored

2026-10-12

Public log entry

search.sigstore.dev, log index 3220562278 · entry 108e9186e8c5677a2753…

Expected log hash

13907aa3d3da271016c4b5e75946c4440692c6b4e1684187b965dbb983b157f7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791777669660","kind":"published-quote","locale":"en","page":"brand:fastmail","quote":"I contacted support three separate times on three different occasions, but I never received a useful reply","rating":1,"review_date":"2026-06-30","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a431dbf79487c40d4e8f79a","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2d214bb14438…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.