I have an Amazon EC2 instance in a VPC.
I have not logged into it for some time, so I used the Amazon EC2 CLI with
ec2-get-console-output to check what the thumbprint should be when I connect. To my surprise, the thumbprint on the certificate, in the remote desktop warning screen, was wrong.
I have connected to it via RDP in the past, and I am pretty sure the certificate thumbprint was as expected. I checked other instances and they matched their CLI output.
I am wondering if this could be something to do with the instance being in a VPC? It could also be a man-in-the-middle attack, I guess. The server is sufficiently important to draw unwelcome attention.
Currently I am afraid to log in, so what is the next step? Thank you.