Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Very good and practical”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f6e57a7bec267267992ff47844266475cc2abf4ab46a504da39da49380a1bc51
Signature (Ed25519, base64)
rL9FiLFV+OkqQWKGqkTQSpL9mhnnkl9D+Jv733qQdx/5HVp76e6uV2LnkZi/aT53/mHsy1QWxvUtefbKPc6jCA==
Merkle root
3e1c67438f658ba7fd015e6979c1bfd82d90efb0848cecbd4d902d6b2ed171d3
Merkle path
["f6ec5c48089c3be653b87ab7b8e014c54d5f45086de0028cc5da217fb4c9d0f5","e91bb2d4eef7b88d9d9a8afc94b19d4ae98cea831a6cccb2b923ba7d8a99a72c","dbcc4ce57442535c31ce8753f1933a6d937bf809b719b17c4e0b0de7f24c8dbc","9fd6c87f01a611cf498579da18a203f601278da48e2073d05a2ec11d519efb5c","2accba8667a15192c656ea90a1f5b881d90cf07382696bc38da3a6a68a37d5c3","003bbd4a8262aa3562111b0ac40f731bb9d28a6673d706736ccc9be2002727fc","54cb7d3751ebda54c5f5847312130b280b885f52f61b3982656d104991fc887d","99ac20e2176a205dac41adb4c77be8a61a6faabfa5fadfc94a8bc8797bb3dabb","32ace648890c38d43a037d065c9489ff87fb3a011277912a07f26cf868eff22e","a5ca3d27c4722b37c174d24b3cfc43f871a36d03059b8e9827007ebe716eacf5","336e09e51b73d0e6388151381dd1fd33a35cb060ffb99743b35058b79f64da7f","bb7bbf6f568971e46c339201da8a96bb6a6c799d83bcb98c5de8e5a4b9d99a0c","48925020460bba3dda217ec8c974e96be1bded9d1769192f63a66523a3769db0"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524810465 · entry 108e9186e8c5677af074…
Expected log hash
129b219cb6155ac24569a579c61e8fc9cc2d89305732944b8849d5e719dfd073 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787193927339","kind":"published-quote","locale":"de","page":"brand:pdfgear","quote":"Very good and practical","rating":5,"review_date":"2026-08-07","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a7636934dde8da82ab69d25","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3e1c67438f65…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.