Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The spammiest company I have ever encountered.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3272274666

Proof data

Record hash (SHA-256)

ac702742e26f464c5a06ef2a2ba6967494e67d89da99a15b05c77f19aad62053

Signature (Ed25519, base64)

uDFAfbmEq1F+chSJa2bKOlYjoqUgxjJ8228bsTblO1uFZJz9eG7FO9IFz6++jvGUQ3kQrDBdm4y2C/C5unyWBA==

Merkle root

a4d47c2a34f6eeba31e2744fb1551fe9a0e34820dfc152f1ad93a68b24759c3a

Merkle path

["ac708bcfac7da7088584447992ba5939d42338013d508587ad17f0a3d28fb459","6594cb7da2ac30dbfdc2aa4fcabf94a1d2d156c79f8778a47d05634195ffad2d","dcbd6cad93a0d0480dca10a618f63b6a2942147b7ed052cc47d2df15466d33f0","a752c3f057444577b6c967c4fc11e029e571a7ce4c94c08d451198ec1be1502c","e225a0f348122e9f22bdc721056cc9091cd89f52e74a34bea0a30d827834432f","80d687d546e787da24ee5e19a35e8e7ceca38f26bd100dbf44d21598a1a5909e","e413f21627f431cb805a197aaeeab21ab36a8966e32973dcd1fcf006d327fbc9","7d9c196f44bf1e6acea189b56ec224a9ed1ab61f4e9d664d723d242ed2701f62","175e9735c0e85fb35e07d03f7ffe9ab12b178893baaa06a5f991c6d338995d2a","9bcf5ffc7f60c9cf9b6531b7b332032db728753d85334250de05ef9a08771b1e","20372a4689392d223ec848e11ca8f6df329e007c9517f07760976e4a09503ab6","c479e17393eda58c261fd513f5be9f2cb7babfd787057ece98eb890cfef8a459","271889eca080289725c904db6a9fa9f915a44a544fe6f7fce42541ba90154749","35108299fffbb5c1a0d86f074b5805457d73da5ec7c848a19bc9a928f6a42a99"]

Anchored

2026-10-16

Public log entry

search.sigstore.dev, log index 3272274666 · entry 108e9186e8c5677a2724…

Expected log hash

d56e71820b4c8c62b755e9f6e3d2b624566d12db6dd1606e99ef55749400c387 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1792036997995","kind":"published-quote","locale":"en","page":"brand:experteer","quote":"The spammiest company I have ever encountered.","rating":1,"review_date":"2026-08-12","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a7c903a8b5c914d58c84039","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a4d47c2a34f6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.