Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“This company is the worst.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fc126544d0ec54d4afae666951f5117250eab29933d32d792cea9fd39a53eebe
Signature (Ed25519, base64)
4DN4RrsiqwlS83LeiXNTFAHoqBXtL4ZUFi+77ex1v/tvI38jodOZGoF1VQtF0c2f/Gk03eWQAQtc3PHMMLHtBg==
Merkle root
3e1c67438f658ba7fd015e6979c1bfd82d90efb0848cecbd4d902d6b2ed171d3
Merkle path
["fc11157db092a0a75f250072e4799ac7b00d810b65abaa2dbdfa2bfcad99ce88","c0b936420896b7ba75464a68846efb0c88e23d5b356c407953c73ae99f342c25","37c58c767f638c68d8666a04a73b4c157327c7515b1ecbd7470d624c7921ee5d","184801f743f657b3059c53b3b40c693207e7c1d0605e3b919db18bbd11340025","4b2861655cb5d720691cd04b9c0b46885d7bea982e13e87ffc98fc0a91804e18","7c26b715311bb3d3fefc5ca67183c6e2515ff6b67794591695aa9219175b21d1","819c844fe9f202d1d91e514b259293838a07668dc464f1c4468be1e593d11152","e67583725d8c1fc89e3500079feaa442efb3a03f5760973e39dcef1d0863590b","3856d116865ab728fd47a2c45e53e4be5480ec26615d8991258bd9bf8e66acfc","8e843967843f45fca5ae295bb8067b393f5706c9dd4aff34b47ed9968e42e02e","bb7bbf6f568971e46c339201da8a96bb6a6c799d83bcb98c5de8e5a4b9d99a0c","48925020460bba3dda217ec8c974e96be1bded9d1769192f63a66523a3769db0"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524810465 · entry 108e9186e8c5677af074…
Expected log hash
129b219cb6155ac24569a579c61e8fc9cc2d89305732944b8849d5e719dfd073 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787193927339","kind":"published-quote","locale":"de","page":"brand:docusign","quote":"This company is the worst.","rating":1,"review_date":"2026-08-04","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a71b82cb5784cbcbb4c7f9c","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3e1c67438f65…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.