Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“If I could put 0 stars I would have”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542443729

Proof data

Record hash (SHA-256)

dea63c6560e7e692e6c96d2d770c256d36b42f1ab2b00a3f8060ee4ffea9f374

Signature (Ed25519, base64)

iqy7McZfq/QuduNS9OROoSNy64oiYJ4J4jpSCSgtFWIFFjfclhuXe59A1I1CazsLeaps3RVpjA2jS0c1ORMFBA==

Merkle root

4354cafe0e2ee66c200238a4bfe005f997e761de26d9e528ed6c12dfe1b33129

Merkle path

["dea16ee7c3a869cfa0cc5fb6f1ffa4151e46b3091190748b6adf61996796ad1a","665b659f480d144a46ea42552459b49076244ed8f9bb8d53dfd1c5856ec2633e","7eb4e7e96b98ef6049b71d9ed7a0cb40aeff039a5884314f30f953917eca5452","a887eb2fdfcf16279d669052a642bd990ba89ba225a7c51e20c069ea75faf6ba","2e73eaab9e1021803dbd5a477199be145fd587fe5d450c3a58c2e86fd582b445","d41068974e6a4cf96a911124478c015ed47c0f65874ce978f5e3a33d6abbaa1f","3dcebdcae5c985d87408ceee9ec2688381e7d452e45608ec333620361d4a0994","6a28297017432ccfc96a075fbc6ac425012b9cf787bce798bf2ffd6b5defd442","5a67b55da3f892a47eb2708ddb6c7022ad6a19fc360fe0ec681f2a4d88f89b7c","31dc14bfc45a9790c1a6bcf72d9478f5fb939ed6289affd2261ad28b102c36b3","e7cccaa539795731abf785faa674d81d801c2748a9cb38a15ed5d78eece6c1a3","eb64379a83d5dc0cfc32779685ee719fc44bda50b1850312554cc566153b7108","4c9e0930944b64f7d9eb388db919606333eb1932656a429ccdd22c0218ccde7c","4f746f72cfae819ad9f244ee90ed9273f8ea83684e51913618a036c86eaabec0"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542443729 · entry 108e9186e8c5677aface…

Expected log hash

1f12c9d846c7a9fd8aeda84057eb4d8f639bf78886a62c6290a2a60cd48e0812 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787280389476","kind":"published-quote","locale":"de","page":"brand:klara","quote":"If I could put 0 stars I would have","rating":1,"review_date":"2026-05-11","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a019bdcec5b7359cda01b07","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4354cafe0e2e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.