Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Das Geld ist gut angelegt.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
abefbf2f49b2bcdf54d87a3fde715d539ea1915201e978b557729bb21a9e9ea8
Signature (Ed25519, base64)
jRAx1T9kXrKSg1bPTNFhu08ByMgO6G7s0xeKZn1hiQz+6li2yQYOzaU8vSt1g50chp3MqC15wKuJftFvv9Q3CA==
Merkle root
3ac2a65164a98b25d6607e9cd20ce9559bf4391886ca2eae943b9792fcb8a323
Merkle path
["abeda3de4313c35ba6a20e4d0a41c45bf4b8da7c0ab672e4a9e40dba6513ea2b","04a081dbd010536d94b6400f00154b8fb2682f2364ae41129363b407d57894be","3fd4c1631f90f52c3bd8021b5f384951b79e4d29814fad48110e405db47df436","57376d820c70ae5fb8a6f675af933f3d2dff03ee4a7c12f92f409fa3499fb81d","193d7b62f91a10f07a632affc83d1802e2ab8186c7bff7e92df812f3d858f709","9d16ade8b7afaee634c3c883483342d300ce0c450fee921f019c6965758b99a8","d9a18946dfae78204df08edbe24427a8b2c97031fbe6e1d3c69187699f618488","6657e02d3576711d2eef9417dc9cc12a4cdba902f1a0079a8f70ba53c21f50ee","9ac026e88b57ccada0e1fb92508b5762db1d1731cff05d758e357c22e43a247c","005bf889aa9064757129877caf1bc4703773ff90c0c1dca1121c5363445016b3","500f931195128186fc5378bea8c8ab0fdc1f026a843389e42032f59e24c8b7a4","008ef998ed6dd9f3799a6840f0ccd06853f8c33568d99343c1fb34c4dfe62a94","9bda89afb801a1d22cd8905589cd5237ad4f295b6954329d6c8a92352a1f2d04","582f0970476bda674580f5a1da0cf4286664f79c3451840f238219e2e601200f","f188a7ba649f7db7610333505ec2abb71ba1da1ea59f53190cb32e51e57ac1c2"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3083528439 · entry 108e9186e8c5677ac4c0…
Expected log hash
8816bf48c9e6a0b1ef2758b04fc7021824819cb4cee30b879cd603a10d38b8a0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791181418024","kind":"published-quote","locale":"de","page":"brand:spotify","quote":"Das Geld ist gut angelegt.","rating":5,"review_date":"2026-09-20","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6aafac402673e2ab0c6863c9","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3ac2a65164a9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.