Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have no idea how it got so much good reviews”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f178f170a45e6b16da529f0996756537b6a83b8c52c62f07be04255ce9ced9f0
Signature (Ed25519, base64)
LjCb/jJH9hKUhYukxzi03JMQl7UPUtPhHYBxwBCeyPEQBY1/pzKXJpAt8Je9mpLSzjQRGy2YPubrJzyqYLiHBA==
Merkle root
c35385e3159410853b606ace3c93abcb561dc35874bbfae2272c5b0050f06a48
Merkle path
["f17a2b8dc4d91ad84a140c8fd166f099855b8bbab6bfaf8dfafa8ec76b8c1505","5f87880efee74a4e4cb4a654342bd81385b85d5c0b57e6a622073fd4b92bd707","9d16a842b6b584e44994ee76d26eae6d34684d0257d2e26832cc6e6ef9e3742c","2b5fbc411c907515cc2e5dbaa8b92884e3ad9fc6a747c96ff14251523fb4c39b","bc0e7eb3ecd6500e2f08294c43764c77fc9061d323d890fdaf8069ce4123055b","6419dfd9e50de682ef71c0096e1d37a13b815ecc5a87b4f266f3a6e736ef9e04","f9a183b760878f6f20ec183dfee6f5f9dc93ee25149995a6509110a6ab19b9d9","1a2f61449cb47560740092d470ad7fbedae405c3e54512cec97a4ba09ebbcf8d","4a1f3a8338f4cd959deb91dec2d8288b61392d5a75cb10bdc420e77c03902dc6","cd886b6197414f2401570426ca2e793e809600f09024411b41cfcf8f5d01b852","04a24d97410edeb9bc5578d3c81dc4ac1ad76170426edb2556bbd64f2393d76b","f6736a9df340369491122dc83cdbe986eab98696122bad100ccfd05288b49a1e","c6a0d5b9a6cd8badcfc7fc966f87c537da74da6d7b76d14d1aef5f5ac379b21c"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514083622 · entry 108e9186e8c5677a81ef…
Expected log hash
eb47f42546fcc705387579993679cd6250c0b995d01bbd10805cb4c8d66efe2c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787123762743","kind":"published-quote","locale":"de","page":"brand:pdfgear","quote":"I have no idea how it got so much good reviews","rating":1,"review_date":"2026-08-11","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a7aeb9becf86989f288e46d","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c35385e31594…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.