Your ISP can act as a MITM and they can even poison DNS requests.

Other than that, governments can corrupt the certificate-issuing authorities and present you with forged SSL credentials.

http://www.eff.org/deeplinks/2010/03/researchers-reveal-like...