Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I am already searching for a shop replacement because Pixum is just not clean enough.”
Trusted Shops · 1/5 · 2026-03-04

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514341362

Proof data

Record hash (SHA-256): a8273ca17d0a907beabb8eeac53b5a04cfb6a4c4080e4fc4fc3b4976bce6cdb4
Signature (Ed25519, base64): ++r0qjv+TutmIK38FqY4i0JTATlgszqbD2UwojoxzjkveLSekJ+iZ4OMghNr+xGADN4TdnkFVnKltgOCPGXDDA==
Merkle root: 2cd516e344e4be63e12361494ae610d89d15708131c24034ae0c7b134b8bcc53
Merkle path: ["a8290bd50dfc12f6ac35ad1137d587caa846b085f65e5cc15b32750a600aee4b","c2f55497ba80b1d7f36e340e87d2d25eb718732dbd599a3fd5fc0253e81d22cd","10d13b89202c6119b12a0f3c4b00afed2d00176d2965859531dc0db86610c803","de0107eba4663f3b8f496138c4368d7f58597517f16c7b99666888e3b1c3b468","569f671ab0caedaabaa7d745b797408123eb93936fde58078f26b73d2f111b5f","8f45f28caeedb57aa7cfd59bba7a782039ce1f95ddebae196f9d762710d6be6a","c9a14ac4e6e9e5bf204feac7291802a286dd43bdfc49a04e53bfef066a16d443","deb1003dd8292b25b52f02dfde1df36720d6929af5fcc659b45dce3cf088bab1","e5bb10f15af6c2becec97f7b0a221c4076df0723acf6c605d2141365be63a930","0b6999732c07c1d29d097686537b88d537f522cde1ed36384199880ca69fdd49","67ea817fd52df632a40183c3b83f404b4a93ed2f26f5946ba0a7a2d314b85992","16a46069eba3dbad11cef0de391c9f1c7cf1f618f86aced37ce90989d725f407","cc71a5000fc2860f360c8c3f3b552a8e3d8697cf2cd13638ab82c9763eecbf2e","54ec8fe35b61032acdd3a795b276aa22207de669eab4043c431a0246c2258612","22334ce08b4f33f031252a9b7a089423436312a37092b6e742f7471c7ed075e3"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514341362 · entry 108e9186e8c5677a67a1…
Expected log hash: 81a850cd5c32c6b6ee86a2774571659cf829f205adaa17a6b9e9a6f5bef7642d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787126744998","kind":"published-quote","locale":"en","page":"theme:pixum/returns/en","quote":"I am already searching for a shop replacement because Pixum is just not clean enough.","rating":1,"review_date":"2026-03-04","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2cd516e344e4…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.