Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“My card was blocked and they never informed me about it”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2495157846

Proof data

Record hash (SHA-256)

ee1cb57b084a2453b4aa77dfb5e2bfacedff567ef2fb5267c2e899ef1ff30bf6

Signature (Ed25519, base64)

Djik2x2zr/OLqPKkNbU/3+PvncmsL5Ncew03IN4yezy56ARIv/NsZjssCGzc2Cr1zBTBRKWjDmA96d2+qMTEDw==

Merkle root

5f465603cfecff8c631b83258a9f794433a9fe1f55c92c7f2359c24d5239d7f1

Merkle path

["ee1c3bea9e827a8d85df33268226a2ffe6874897300d1703a390f67b0f47234a","71d7c85cfff2edcb2904cc24358f0546e68dcbb711217a473839a33a90a18be6","6c31e4d3baad1030923a06bd08e241f3833844544c3f45fde935b028f8110c2c","580fdf84e98370ad7fec13db29439dcc84cb416c61682585e540781bb95d0ba6","2175e37476817910b4209e03610e43aeb75a2526e5e8ae39e3ded95ac01b3010","8918446ab97164f852ed9b0c9dd468f346b9ea8356c710887ca005bba6b47e3c","c88eacb3691d382d0b25a3d74b4685eed9ec587ef2999064649eddb4519720fd","ca41711e21c3eeba336657b7c6143fcb2b64b64cbe38e146e4c6694baf7eb081","321548158d2503f4fc497005adb498bf81d0f680af11461a38dbde3a7e177ea3","846de4014e2f4296a18c2ec45f452f726fea86e5ff383310bb0f51e4927f8560","4b69f55a7aab4cfaefcd03dcb6af34f60f8e86819a5209ce91b0ebcc7765f616","b93f32b71d6197149e0289be28c67698690f42721a0e15cd4f793210433eece4","fb47924f9be81caed657ab77c2d00d34cb931e909d55f49e5a870a3726a654fc"]

Anchored

2026-08-17

Public log entry

search.sigstore.dev, log index 2495157846 · entry 108e9186e8c5677a0eb1…

Expected log hash

3272f4e3e87c1e1bf0369f64c72e7fc63fcfccb2635eca462b023cee408b7ecd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786935515462","kind":"published-quote","locale":"fr","page":"brand:worldline","quote":"My card was blocked and they never informed me about it","rating":1,"review_date":"2025-03-28","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/67e6a20d53ba6a4e45f173bd","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5f465603cfec…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.