Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“takes several mails and time”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
bc8f79c21edb110c16c6a8a43e5935d49bb98eff16e5921ac33fed07182e924c
Signature (Ed25519, base64)
np2lXMlRED3Eaj4mnVazRrouHbXtXZ0wj2Ptb1Lz00+iruhU0J3Da4S0Ac45fLx8twt3tgAaodK9DWcvxH4EBw==
Merkle root
6189a42bfe294c4034f316d047a716a5efecb511b8dbe64c4f7f543872c9bcee
Merkle path
["bc9077d2f3fa27591f7c921e5f7c1425a47e91c1e66c4fac652ea7bc07cdf1ec","cde0f725848c7bfff5864a34af2b0f4a9f798ad63a7ca54721b11220aac12b30","981e8a34c85ee21861495001bb6666e1443792de8d11254a208b298416b8542c","30b30a28379a4c32796d5b7f4887b31c5dacefa0c35dc7a9d468f3ee9824dc06","53643a7b390e55425be63f6b37f3902fb802d2308afb23675cf7377dc2c7ba03","9fecf3248e7439f35c92bb47231fc4a82c2aa2f29d7b50c7f066ce7bb9a33ac5","885e3a150b5e0b493127f95c9fdcfbfffef6f66650dfa4895f2999b9084f42d0","6e4467bb7f0da6f6777a93ae5082633211d269652067c5cd9074204d924d2613","f9816803b76ab7d9d9ae0609e9546cfb72fb00c21f0e8c2f0ec9af1eea0bb548","c09d9e35988a6879bdac35abdc9bdca33fa9961f6bb86570cce7c49cf42d951e","9839eea29e139828dbfc76204a299f7f7c70e4e4eb2c993bcd89ac710a6e4e38","e280926fdd2ce54ac126b17c02367aa8ce675c4d979922d055b028e3bfc0450f","1d0f39e8bed66a8f7312ad65221df3bf35995d8f54d13d48406f8dce6b301464","6c4d8c79937f7e6f07e56ecf18f28829ac4cba63f1b51002d7ec38d8889ccf7c"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514188040 · entry 108e9186e8c5677ac9bd…
Expected log hash
b0fc1d11450dfeabf778635bd8a8264987fbb7e682331541ce1f5d7507d4e862 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787125125654","kind":"published-quote","locale":"de","page":"brand:worldline","quote":"takes several mails and time","rating":4,"review_date":"2026-04-30","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/69f30992ed6f595d63695686","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6189a42bfe29…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.