Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I am still waiting for responses from companies.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514130917

Proof data

Record hash (SHA-256)

fec6eae1490fb42f0dd08ede70347cd1e9215e9a5ffa4ca25199bd9ae3f6268b

Signature (Ed25519, base64)

LOifzPNPG2c9THXKfgvdHEy3yoIX1nPWajTva2CwRn/J7TrG5o07TLnxXashJ+5Q6TjqgtK6Q6VJGpbWmHjTBQ==

Merkle root

72711ef72b8a7ab084630b9628ceb2defcf0aae546304d44ed173db57929457f

Merkle path

["fec8ad3ddcdb47111dd88381651673be59a564365bdb46fc645e61b919588df0","0b84ee3d45520169eb31545f53324bff1d4e7d50321f05324086ad9e81a33fa3","bd9482e5d0607dba2dd0c2db95cf89afedf27b57697a390a086fcd85694b7d02","4d058dae0ff25b925811aa89778fe71b5447bfc72094d28265f4964477afe298","7db89c6fc907d1e90992fec2c52f4908ee70312ae0af0a232524ee695045865a","39ffa345b731393846408781b8a4460dfc688f893454bc6d5abf32bbed104e77","9b59282e579b61bed66d79936ab7e13d00e86bdb671af527fa578ca88a2bb30a","153463a4c85d6def95422506985394cddbe6c64fc9f8b848d9c304fe81eda869","0b9758ae01e792424b6c31904142d36f5190ebfc0a49e321ffd3790876850616","5dd926ec2e514127e6b0a5fec0e9eb20e98cddfa828c760c95173e75db9c39b3","bad496ca101ef558ad604774db4082a9da7dc7de7a674c932ec7618992c46946","eafe311a71a1838ff3b1485f258dcf82b745ff01c6ced274f8d1b0da75f41fe6","03f0d2dafec654000c7e5c6011a64b6127ea86884de5baaa1829908da41e288a"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514130917 · entry 108e9186e8c5677a3273…

Expected log hash

65ba51eff926c65ed0ce093a942d84c628d811a59302f32867c6589627e47792 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787124488047","kind":"published-quote","locale":"de","page":"brand:joincom","quote":"I am still waiting for responses from companies.","rating":4,"review_date":"2026-07-02","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a45f21c682be1e48358f95c","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (72711ef72b8a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.