I just found and fixed another off-by-one error in the rip sender; this one had the effect of omitting the last route in each sent packet. Packets should hold up to 25 routes; they were being sent one route short at 24.

Effectively, 25 subnets were missing from the rip transmissions.

Oops. Sorry folks. - Brian