Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“they are horrible”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
61aaf1909a98997a51e247340e1cd3c718bbb7700cf899f1d98bcb7c8ee837ec
Signature (Ed25519, base64)
VBfDsiQGNSC108AQu//Eb0OFVWcLITQFqSPootRcUdnJy5SOVyi98weOr/sQUDSMTjtv4T3qZ/lNCD6kcoqaAQ==
Merkle root
68ee5f8618d9ce1aa33f2cb5b6f3145b5f909a3c35a03ccc3d10e979b2f81082
Merkle path
["61af7e42815f3940c63f643be575621ce49f61f26bc685b3108e35d90946dc64","6310debe4a886ef6f826e3f39602b287e2d3077315731b039a09f98b67bb3b48","7b788b7a27ab24b2e475b4989a00227fda190f5c4ad1c825949d462f5c9ce816","0550ab80c314a85a92c22aaafc430ec49b10d641cf9922423504d6164ffd1dda","9acc1dfced12854608415105954172aa081c5198bfd674c7ee1f680cdbb093b8","79303a2ca292035d536db575a2ae3538e50b329231f51c51aff4c10b42db6256","4a678e204fb97bc7fea32742efb37e052926aa054e41ba1e63dab45b0e1885f0","db8a05c9107d21d535af2d3b64534910d4d27a34140af10c4cc5b09367509064","0e5bed31c00914f10fab73c0a1065367abfd84246185b5d654ef429a569413f8","39d660f0e456bb2c52a0ab67a37426c96904552bdfb4259b70ec75600f0a7f08","56d68862d4b49a1aeb6a09aa559f42310fc778f38c79d53bf34ecc54b851ce80","c6e64e12e0b8b2f5eca9fac3d3f3899ea445ebb78d97caa0a799132e0d17d541","71e82fca1bf2ae48cb6a9adcd3ce0a0d0fa2dea7d80e41cfa26b2813f59587ef","e66299710f80b56c392136748910ac59d79a991f3e479ea8a96c5c23e200aa78","418554fa0ebde54d6cdcc03145c7126505ed96d3734e8e7ae56dc0dfd8ca0a2e"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3140838741 · entry 108e9186e8c5677a4791…
Expected log hash
ca4949400cf2d29b49789563ea2e672fc73762380548d6fd65398e40c0d98728 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791433229105","kind":"published-quote","locale":"en","page":"brand:surfshark","quote":"they are horrible","rating":1,"review_date":"2026-10-07","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6ac6bc2f29094516963bd660","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (68ee5f8618d9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.