Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I can digitally sign and customize my documents”
Software Advice · 5/5 · 2026-01-01

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2524422814

Proof data

Record hash (SHA-256): ffcaa47ae897944a60abe428013c90211d8ea46fb2604794370fda0c0d84f5a6
Signature (Ed25519, base64): /OL1fUmHvKjtGdQFSshzMW2BxjpftUGTawD4ZJAJ0PCQqDfygIjUfDxviVYib8Yd+dF0WoorhnNFAgWzflxGAA==
Merkle root: f8b4f722de05d6805a889681c3818dbde0f5141f0c8463f2762c4a9a02d66a2e
Merkle path: ["ffcb37bf816705f34abb22cb2728f9e06f5ac53e2162973ce1099561e73befce","102f5747a22454d777d5e3bd8edce126237d66b4f1eea6f154fe1f3d16901088","22894a99ed204bdfcd1e45342fb65eb3f16ae708412fd9100254f059da98ae3d","b054dbf21e321fe57631fc46c477a7b1284c37383b00d38c792dfd036a4b7375","a511a3cc10564682c5fe47e02f5e6dba567e7b14fb4167fa5ee5ce43a1012bc5","9568a51d01fd07a8135cc1a4ada8ae44f915b988cda630827d1b1c59015def55","056f1442574e30dba9f03934d80dc1d22230f46c336d380f848aa1cb245e5e9b","74197246993c1bb6325f6c29b428333526c3c48119a3cf319f628f5c4b7ec53d","0880f57ad2cb461ea7a46b7d518040b61b47832137006fff284924a4d08a85c7","06f7a93baf95476f593ddecfca04f326c9a79ac740314e4fc04c944d1561aa03","55c8c6eecb85583149f9a1265629d0d25028f7f86ae101a9b330baaae0f213a6"]
Anchored: 2026-08-20
Public log entry: search.sigstore.dev, log index 2524422814 · entry 108e9186e8c5677a9741…
Expected log hash: e042bf60ab37eb8951abb7a408cc8c7483ec875b9606253deec7a67967130ae2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787192294432","kind":"published-quote","locale":"en","page":"brand:nitro","quote":"I can digitally sign and customize my documents","rating":5,"review_date":"2026-01-01","source":"Software Advice","source_url":"https://www.softwareadvice.com/product/174016-Nitro/reviews/","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f8b4f722de05…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.