Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I am stuck with a yearly contract that I did not book”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514851395

Proof data

Record hash (SHA-256)

76c1a4f29419e5bf783b20807e0f51b346490379ca4aacffa895334eac19ce39

Signature (Ed25519, base64)

q0t2FAWKvMUY/GVSBbpzqTYf4CguILHiaKbTuuOvT3HcG5Xhb7XbrRx2UDgOdbieEwLNVF1X/1tKDsKnHZGHDA==

Merkle root

b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c

Merkle path

["76bd1b91e31856d351c27cbf06aa2a39fe042c4479162be545c07f506daf4c86","ddbc9daa1d33975bf5b1ee6b202f952996e525554a66470fb5dcf6c54087f92f","93c904aa7af79b05295b9809daabe23ccedf941b88efa158026a74f2a8dd17d8","c66a0d68fefafb39420969315d357661ce985a51f7a716074c9eeaef94f19de8","ca2d42799fc91d0c2f77a8968a0616e8590832294bc5be70c7ca92a2b62aad80","63c80c1b1d9d6616d8299d2641b9c69e05e20558b1b68cb4f5d3f3079b6edfd2","791e39ac0e7c07f17b2dec2137d4bc302b96283a53f7112f9f7212724fff7683","ff5f8b732084cd47d0b98ca689a1a43cf02a77fbc83c5710f56d93ee018e34a0","bb31ab2db7b518964c61ec361cd6f6c280904bb220589f28a0eddc4be3eac8de","88e0826e7c263a2ad061b5deeb05fbe6abf48a7867ad3058053475380c43f1a1","7281f279cc9a8452670fa9a12ec35fdae2e72c841be32857fd0db89930ca121f","04087565ef2bc2296fbc1a825b280fdd722bb654bc60f0b5bce5b348a7793e47","7683d5d7c88ecec7a3b1a5734816ef1b47ef9cb2b169a45f71d75a399897983a","a87bd939a3ad0796a8d580dacb2c37af7f713a77a0e4e7ca6c95f21a1e1d62cf","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…

Expected log hash

687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787134378129","kind":"published-quote","locale":"en","page":"theme:sevdesk/returns/en","quote":"I am stuck with a yearly contract that I did not book","rating":1,"review_date":"2026-07-20","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a5e46515504a5bd4628f68b","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.