Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Even signing up is a disaster!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ff8ffb9d9b4004e78c06a51f7152815a465dfe367de81887f58ceff86faea60e
Signature (Ed25519, base64)
Yt/3JEPVLk7I5rIAXlhjr7z2cuJnpuumQNhUEKol9CmWT6leJcY9RoPJCogPxKRhqi/nkZ4i2PjXe0qcWwj+AA==
Merkle root
30b81ce96f52ff8c37a1dce6a2cf1045c2f51663c1ddbd5ca071d040e32c05d6
Merkle path
["ff90a358ab767e5d13c2e26222f7fd7cc96a045f7f63bb59a26612cbacfc1d10","55d417aba261d695de8374f90e761d82cd35143700bebc1c20fef88f4d965c3a","f0d6d47e3a7d352aa1a60ebbb0b53168f626724414f5b899454fc8690d2e9df4","34ab22a11bb2b9c402ac108f2f58392133f3f651a18fedec92be0bfdffccd28e","acc2e8e3cdb6762a4805b18eda5f3a0124024c642b67ae95b8c7903b17af29f8","a7af599cd65b046c9e15052f1d200aee2421b7c43114c8d3d2989bcf7c60f8c0","f205a293d7b0a0415953922675c2ec92bea784bf41d9da8ed75ea29841c496f9","9a84208d31185616d9fd156f63cbca8c8526795b72a70cf1c0976a06feac2efb","7586dc62b129c7d604d63614de71880574cb6a264c2ee3a7540552454b4c8fa9","1b7d75218409e2d057a41d7e603bd8e69b90f1d5e23bcda4b721d2aa8f99df58","ac7da3171de91158bb860ffda57540bb145d87d9e3a1a9e6f74d9fbf7685b1c5","4281a29cfd232d37e0fbfb8aa7c09e8a557b1a863bf1a3c9a19105846e567fa2"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515243153 · entry 108e9186e8c5677a8eb5…
Expected log hash
314ca716b1ad71ca29fff6da960e81a719fe30fa5fc14d8646acca79a7c09353 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787138594002","kind":"published-quote","locale":"de","page":"brand:css","quote":"Even signing up is a disaster!","rating":1,"review_date":"2025-11-18","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/691c32ab30f245043b0da38f","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (30b81ce96f52…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.