Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Dies ist der unbrauchbarste PDF-Reader-/Programm, das mir je begegnet ist.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
dda70ddab214073cd0ff4bef4a7f44d4c3ab0550982f0c57136cd7f8e9dc4686
Signature (Ed25519, base64)
pccJEO1/xi1op2tEPbpndeY+FAcr05XKId181DVr5mu5a+W7XE8JH6al9c745XHIe2/8mR2GuyW/fTaFoc9lDg==
Merkle root
42ee8ba4b974d737f78b7f168d0af8ea0510697ac4ab4c6db44b5522bd195660
Merkle path
["dda94dd55e613fd33ba4dd1695412cbcb38fedb6b83286a79732551110543599","fa9ea26bebf8af5d2c5345773e2ae9a6c426b36dcb5795aea8dc61f498cb552f","c0fe07a85176a5f41aaed22603a918afc539685680966d870c4b5e2ab1c87bad","080699633fb135c64352738deb332da63b2abaf400d31c2d1e5d71140850f248","6b9e3720c90dc127c6a7222d893a680bfdb1eb76298a65d7e350d7cd0f7f74e6","3ea1cc296ded469d30db46e5883c046e3b5a796a7059b3afc21f6e21ebc73b03","5d2d5760f4581c0cc3aedac6a1e5123e9839d6297aea381a088a4dc32d740b51","452a9e23c34c573748730c353eb37e611e114c150dd0779bde2307b7dafdd8a2","de3b1c664a6811e4716731ab2da1b980904d20dff9810c5fccabe74924fa5cb9","6ab4b74c55b9b8321bed451703fd08cd22b72b3c0629c314153ff87f8505707d","245ffd9ad577e87c1382311575557f1385b9c49e44820d02bc4e15bb509820de","3530a77207b27f888ac11af5fe216bd9056e8b3e68094ff10b3cfbda4cefb946"]
Anchored
2026-10-16
Public log entry
search.sigstore.dev, log index 3272785693 · entry 108e9186e8c5677ad5db…
Expected log hash
3b93391ec0595ab5c0ff73f2540eb1322f56c3c1302e6789c57b97c74423deaf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792118508353","kind":"published-quote","locale":"de","page":"brand:pdf24","quote":"Dies ist der unbrauchbarste PDF-Reader-/Programm, das mir je begegnet ist.","rating":1,"review_date":"2026-09-23","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6ab3eef05a9cdf1066b1ffd5","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (42ee8ba4b974…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.