Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“We are using Nexthink primarily for device monitoring, and we have 28,000+ endpoints that we wanted to monitor.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2929513415

Proof data

Record hash (SHA-256)

8390eac4d9da7692bf1ade087d2d85bd7afead32e58e59da54a42902f9842132

Signature (Ed25519, base64)

64vVCX3anJVsMO75mtHD29120i6QPxOV/HIEu7vD0oa5W0th05yDLLAZ/RtWqCeFGjFxh+LJoOoHqGcQaMksBQ==

Merkle root

277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2

Merkle path

["838f5f92385834cc75512315b9d27c52e0c18d7fbbfafd96c3568333ab99e816","2774df5a6279167433fbf1614b2db4e4ab64090bf255cbac013fdf68129f13c0","3dd49b06f90dfb068494507ccaa7a9c6105863a2be3ddd47d9e286e6618218ff","5dc0f99a01f8e5c3cf656704081a783c411b89718884d5bb5dbb72082df64135","bc138a18130fb0d9b3a1f44e52d30b5085b06ac356a665c41f42eb8a3e4b6452","5a7e92aa37650aca22611f76d5d5f1927f4e28d933b21165e755b99347221f7c","5a0d7c259582d2bd9814833c235aec7480427d7a0233659d86c8df70943d0311","d32f63921a12f78efb948e0f88359407fa5ffb0f0d4e772dc1d2a035d3aaedcb","7f0ad0dc45dc5bc64c29c3c32d67aaf75d0fdd9475e6d0cfcdcca91d8b595eea","20719844fe1742feebbef626cb83e7bb1e97af00bc531ae92540fe46d2a9eea6","4be1d5f0c95cb10e96a85e96c9d00f29cd34e9298ecba9a3752f4f04cb4d2de6","d098ede59e492d69a5edc22e4ea0a324ae8e5a1382fbb4f78d7fbe20dd21f96d","3a4557370606b510c9a2cb3a2ca3671efcf47160eb4264ac3eb8a4e9a9f5afbb","3877db10b6c6cae54d2b07bf0b4ebaa05236dbdf377db3895f407f63dda42bdc","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]

Anchored

2026-09-24

Public log entry

search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…

Expected log hash

9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:nexthink/quality/en","quote":"We are using Nexthink primarily for device monitoring, and we have 28,000+ endpoints that we wanted to monitor.","rating":4,"review_date":"2026-04-12","source":"PeerSpot","source_url":"https://www.peerspot.com/products/nexthink-reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.