diff --git a/src/or/routerkeys.c b/src/or/routerkeys.c
index 8b1ade599c..b17d1958f7 100644
--- a/src/or/routerkeys.c
+++ b/src/or/routerkeys.c
@@ -134,6 +134,7 @@ ed_key_init_from_file(const char *fname, uint32_t flags,
     goto done;
 
   /* Read a cert. */
+  tor_free(got_tag);
   uint8_t certbuf[256];
   ssize_t cert_body_len = crypto_read_tagged_contents_from_file(
                  cert_fname, "ed25519v1-cert",