What happened
A certificate used to serve the relay directory expired at midnight UTC on New Year’s Day. Clients that already had a directory kept working normally. Clients installed or reset during the outage could not fetch a first directory, and so could not connect, until the certificate was replaced.
Certificate expiry is now checked daily, alerts begin ninety days ahead, and no certificate the network depends on is allowed to expire on a public holiday.