Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Excellente application”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2582578762

Proof data

Record hash (SHA-256)

5809ae62d459f925fe3cdc84614a62b592313bfaf49bd8a155d97395e415154d

Signature (Ed25519, base64)

yH+DHvHMc8Eq0pZB2wF0Ipq80GZzfnCEKjwklPNIpWDvQtJcrdpBCWSEc4qLn+3gdW5B9kYn6PMqn6S6OAKUBg==

Merkle root

308131384c17faeb80441b13f9357584a0273f8972d9765a99957348a4815c13

Merkle path

["580737ed9a3fcffe5c7c87f08ee08d6e66ed4f7cd246016bb9bb465abec94dc9","f1712fac4362406f97fede5bc3e503b83c14b85e9e6fc586246db58e1befb3e1","f92de7bf84e7ff7cdcccc8f505ad5d790a7c3ee15c9e9c6d0b3c7a0382ffe7e1","6924e4fb70e8c040891db4b31cb76fc9884ba2568585b45728460e4b384ba607","2de7a1d979d8143941334643ccef0c90283c060a4f36ca8e9eb495f179f17aea","fb78307536c624bb0450e7d9a3f5f698baa5e657d261886e566773e7f5fd3238","a29da948a9da2ec6896d91363d4b8f99ef3628cd45c6e07525ef1c4e6a62c20d","c2da0eeb6c58c3d726aa266dca3fd89b7ee9c850d1fd9ec4fa80438fc92c7f97","221963675addfcd4dd1045ab733c3afcaef684808d1c8dee255a0d3c63438002","38eac70bf8dfce11dd5d581534a1b94c379c5aab00d2b41f87e7020c0726ce45","ab7415c5a1f5854474acf3efab44d3e625d4db15173280e50f4f52e195a05286","54ed6fbbe3bdda5693ed3ebbb7a7a5c8b649a529c982dc318f358935a07e1dc6","731c9e1244b43bff5125c8ac2a73ccfc40eba5122f95dc928a0e365f74fa37bc","91bd2726f2a91be0863a1dbda6a86997ef649da5ecf54fa9ea78e8ac2b08b43c","c04228d557ba3f279a1ea08cf75eea7ca9702c39496b19463f0d7c804a1949b1"]

Anchored

2026-08-25

Public log entry

search.sigstore.dev, log index 2582578762 · entry 108e9186e8c5677ae28c…

Expected log hash

659d869bb9ff3fe54566a2f9c466159e26f879bc484da567fe1542343059e6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787623811700","kind":"published-quote","locale":"fr","page":"brand:yuh","quote":"Excellente application","rating":5,"review_date":"2026-06-08","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a26a1a511d677e26886f93a","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (308131384c17…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.