Verify that the public key certificate URL in a push request is an official Alibaba Cloud URL.
Overview
When Simple Message Queue (formerly MNS) sends a push request, it includes the x-mns-signing-cert-url parameter. You can verify this URL to confirm that the request originates from Alibaba Cloud.
Details
Currently, the public key certificates for Simple Message Queue (formerly MNS) are stored in an OSS bucket named "mnstest".
https://mnstest.oss-cn-hangzhou.aliyuncs.com/x509_public_certificate.pem
The certificates are rotated periodically and their filenames change, but they always remain in this bucket. To verify a certificate, check that its URL starts with the prefix https://mnstest.oss-cn-hangzhou.aliyuncs.com/. A matching prefix confirms that the push request is from Simple Message Queue (formerly MNS).
Alibaba Cloud will publish an official announcement if the certificate location changes.