Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“gut und guter Service”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f6546c53fdeb2534052d0cdec52f85a1ff0122de53077fe5db32fb83179e3214
Signature (Ed25519, base64)
sauRCBrHD9BRuXqK9lZFvtaKVfYQWSmyfN6Hgecu79dOcWpQhie+zB1kHTHw9P/ftchtEvrQFSiATTMKQSMBDw==
Merkle root
c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3
Merkle path
["f653a0243a85f295a17ae0df964925962279f09f5d11efa669be9c3dff952c62","9652faea9583bc4f8d6b960e0add4550462d96f3b3d2551545e86190ce3cf506","37e0ea8fba5dfdbc425a797b4d801414d33e6d4c7884dfde9a9580722c006971","fe1c358b14b4259771b3c55324ffe5f4ff11cc23d7e7aec6b0cf8277f310e0e8","c5cbae790c8734a10250906ed44ea3f17431d8790e3fba95693874db741b87a1","79c89b75f8fbfb2914927fff8de149f49e7aa8f95da15a681a54642ea30ce8d1","2bf6c3739acdf77f9e83266047547a29e10fc703c09ddd6c94e0ab0047ba29de","af3061388c56175e63df5fd155d02c56afbdd1b9f69123abe65879e85dcb4b54","a945230152219794ee5f0ba5f06435ce60353f97d72aea171b5850496d8f6ed1","1ab2313fde98d97e768d96b95a070a937dd768a0c40b3ecffc9205466bcc3374","a656d6684800904deb462e679167fd1e91695d019cc2496ca052b6dde9e21062","6e463be5f42b16a166dbfda8feaac737cc0fc2b2361b5ec875292503df8397d7","7a50bbaa74dc72157cc791442bc1f4313c283e49c9af342f20608dd7e776cbac","ea816c3f8ecd74fdcdc9c068bf36a30dea5aa6d104e982532f9e8769ceaf3fff"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…
Expected log hash
5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791348381030","kind":"published-quote","locale":"de","page":"brand:lexoffice","quote":"gut und guter Service","rating":5,"review_date":"2026-08-01","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a6e168036121a7dddc22b63","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.