Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Looks very premium.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2524617489

Proof data

Record hash (SHA-256)

fc94c4ad557b53539c7d007be5a9d4c6db91d782909df8a941d2af431889782f

Signature (Ed25519, base64)

GALJJNlOZqCJ/17lSYuYm2rBr0NQsf/jplKACR69VaKriQBZM75+JGupNbCL1ueDSuDmwD0pG3cs+oVG3lj9BA==

Merkle root

5c4849a28e8624d6f6d3204e1f81a6b24f2188b6690e8b122801054617ca25d8

Merkle path

["fc96a49178ed2b2ee6697bca3533748bde49b7eca87ccc82856ce8696b50ba3a","b44eebabbaee8d0bbb40798e0f5b9b6ef68e80a2b7fcca2f5e99cc01b909237d","45370505e54a150a01c138243a7a9b39cf840b2c7ff0a63fc302a3094af1d36b","e22d3ff2b848b30793043461477e0b29dc4bb530edbc76f8b314e77c7de1d17b","1a4178091c1f2b9b3f0a82b1b0e0758a3b5c82cc13ad398cb6b0d68f17a0f402","701652a80a920bed9883206b9a0478e2650a9e75ae168bfbad46a90f9c6474be","5ef5ac180b442ff12e4dcb4fea0a50533ee7671755b2b502fd812b95bceead9d","f61a2a87d951bf45367cb4d11d50b8852828a4b088f68226e7271c54bb971059","a4cb17d86d540fb1933259840310b0000d620c827c3db834cf28527907edf02d","c3195c32c4101efb17cb72526e0550d15b5da06a872ef9547a795829225e840c","db11b4aa49c10eef4ec79a0ad17aa97c8c14d837065d5951e22579e1d8e685f3","70f47681a8ae79c4338584783fe53fe7c0d49aa4285188d800ca28397e9f3863"]

Anchored

2026-08-20

Public log entry

search.sigstore.dev, log index 2524617489 · entry 108e9186e8c5677ab139…

Expected log hash

2051fcd76f2ba790414bb1c15fd4d3d064889742ea46f8e55b5028f1f571c27b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787193158162","kind":"published-quote","locale":"de","page":"brand:fliphtml5","quote":"Looks very premium.","rating":5,"review_date":"2026-07-15","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a57718bfd09f893348d8e7b","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5c4849a28e86…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.