diff --git a/changes/bug17150 b/changes/bug17150
index 3fb78213d9..686cc34296 100644
--- a/changes/bug17150
+++ b/changes/bug17150
@@ -1,5 +1,6 @@
   o Minor bugfixes (directory warnings):
     - When fetching extrainfo documents, compare their SHA256 digests
+      and Ed25519 signing key certificates
       with the routerinfo that led us to fetch them, rather than
       with the most recent routerinfo. Otherwise we generate many
       spurious warnings about mismatches. Fixes bug 17150; bugfix
diff --git a/src/or/routerlist.c b/src/or/routerlist.c
index 9b3b79444f..f75ec11aca 100644
--- a/src/or/routerlist.c
+++ b/src/or/routerlist.c
@@ -4949,7 +4949,7 @@ routerinfo_incompatible_with_extrainfo(const routerinfo_t *ri,
     goto err; /* different servers */
   }
 
-  if (! tor_cert_opt_eq(ri->signing_key_cert, ei->signing_key_cert)) {
+  if (! tor_cert_opt_eq(sd->signing_key_cert, ei->signing_key_cert)) {
     if (msg) *msg = "Extrainfo signing key cert didn't match routerinfo";
     goto err; /* different servers */
   }