Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich werde sie nun wegschmeißen, da das bei Pixum anscheinend niemanden interessiert”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2495114363

Proof data

Record hash (SHA-256)

6dd06da95c2a6c70a7ac9be40047aa958fae11f5224d7a203d0c14a81e3f47c7

Signature (Ed25519, base64)

S0dMf0fg0Z+MmAyELFwsj/KhAF694czUR8fgca3cVEgHI0npLjRgkfNbYcVaedS04E59E4rbne9hhlZtkVxrAQ==

Merkle root

de8b012bed4822c8c2019277a5dd0d29f64a2b911dca893a0dc4a34997d27c9b

Merkle path

["6dd0c81ddcbecf130e488836603f00512feeafbc6c30c66b39de8c94fac0ff7b","fc853f56ea5f01b98dea673b5a68d678d5920fad1bbf5dd489c325240b056845","44448b114960990b81c49abc270107bea8a081b04ba15f7130df3624decd899f","ab20b7975cae973989a60f8276d43aa7b7bc8c40085a99f6828642ed9d3feda4","27be564ec648fa6a835d3202b5cdff6db155964c62e734793c064a5bfc3d283b","217e2ff563b484a755126c52786e73257a77d0bfbe23e7d3c53999125010450b","7bdb9fead013067115f27ffb54e3039ff096d7790e439bcb5e6b214c165d9003","8a2db8550977e05787813e3e04e935e7d66815ed7467fe70a627e2b75e91af18","25b45bbb73b969c68f6a8fba0b03f5ba67544ab62b9adba11ec24bb302985923","ed1fb4b515d7a4796c2db25b7901a68719cd40788fcdd9e9adb2ce07dc2b2bf4","7bcb2e72e3daec29218bec283284a3e0b675624234b2108e8eb79d77f302e8d1","3c9af02ba28124e6f20ab2082c6f5bcd63a5fbff02206a1a572f58b269ca1170","2b3d6be5b6b7fda1e25c8f71f97c9eeefa4a4b1342932f8bcacb4ab55a53937e","6488b09d50215cad86af69dcaf04a9b28d1eca2b8f41f338d648e6a6b3a80fb3","02a545cf973db8971f86396f9a284ac1c13f9ca7741f825ebff631e0b74bea6b"]

Anchored

2026-08-17

Public log entry

search.sigstore.dev, log index 2495114363 · entry 108e9186e8c5677a28c4…

Expected log hash

27023b3a9ff654410608df4b8b5cf048db8313c7ae7f1826ed51f9640b0108c2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786934720554","kind":"published-quote","locale":"de","page":"theme:pixum/returns/de","quote":"Ich werde sie nun wegschmeißen, da das bei Pixum anscheinend niemanden interessiert","rating":2,"review_date":"2026-07-27","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XFAB7C17C298F48909E8C9F2BFAA5794B.html","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (de8b012bed48…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.