diff --git a/README.md b/README.md
index eff6a8fe5..bf97ff5fb 100644
--- a/README.md
+++ b/README.md
@@ -138,7 +138,7 @@ Note: Upstart/SysV init based OS types are not supported.
   - [cri-o](http://cri-o.io/) v1.21 (experimental: see [CRI-O Note](docs/cri-o.md). Only on fedora, ubuntu and centos based OS)
 - Network Plugin
   - [cni-plugins](https://github.com/containernetworking/plugins) v0.9.1
-  - [calico](https://github.com/projectcalico/calico) v3.20.2
+  - [calico](https://github.com/projectcalico/calico) v3.20.3
   - [canal](https://github.com/projectcalico/canal) (given calico/flannel versions)
   - [cilium](https://github.com/cilium/cilium) v1.9.10
   - [flanneld](https://github.com/flannel-io/flannel) v0.14.0
diff --git a/roles/download/defaults/main.yml b/roles/download/defaults/main.yml
index 0bab159cf..3aff9fcd0 100644
--- a/roles/download/defaults/main.yml
+++ b/roles/download/defaults/main.yml
@@ -71,7 +71,7 @@ github_image_repo: "ghcr.io"
 
 # TODO(mattymo): Move calico versions to roles/network_plugins/calico/defaults
 # after migration to container download
-calico_version: "v3.20.2"
+calico_version: "v3.20.3"
 calico_ctl_version: "{{ calico_version }}"
 calico_cni_version: "{{ calico_version }}"
 calico_flexvol_version: "{{ calico_version }}"
@@ -378,21 +378,25 @@ cni_binary_checksums:
   amd64: 962100bbc4baeaaa5748cdbfce941f756b1531c2eadb290129401498bfac21e7
 calicoctl_binary_checksums:
   arm:
-    v3.20.2: 0
+    v3.21.1: 0
+    v3.20.3: 0
     v3.19.3: 0
-    v3.18.5: 0
+    v3.18.6: 0
   amd64:
-    v3.20.2: 532b6ca6eb4b9e8f9656ba2c01e3cee24a11b812e360ec6eb540fab8ff908b65
+    v3.21.1: a3383ea8366e58180c0abac2761cdbef3c7a5332361bca083fdbab727d8ea8d5
+    v3.20.3: 29bec97b1dfc135b830b0cbfd3dfe216f00e97e9e6ef08e620d81d4a09db6393
     v3.19.3: e9d91036764ec24f32025c3176efb2c2673b9936270e6165fb6583cce97bc43f
-    v3.18.5: e5f810642c171dd80322529d1fda3eee6179010068d6c624ffad2c48311825ce
+    v3.18.6: 0306c2e82d7c77d53d3e1bc3d826c01bb670292562c1f2287b80738064710665
   arm64:
-    v3.20.2: 69f77dbbeccf94b9d7ed2a321345485e6e5dfdca36da070317b1e5336e054645
+    v3.21.1: 8a87d8f04a871e9b09074d033b3973c0f354e6a5e68b211af6d6220b4ef5b6a8
+    v3.20.3: 63683f21515a20ceee8f234a9aba0e5efb342860940026d0ba6f281cc76aa1e3
     v3.19.3: ec3cfbd2dccbd614ac353be8c9abf8e336d8700fbd2b9b76da1c3c4c14a6dfe2
-    v3.18.5: 2080b2cd8efb71df98dce8678edaba8fce9252801c4b8f987609a4f4d6ddb4e2
+    v3.18.6: 2990c2004d9b9ab6cfc913fe0ed521c12d7b5a3f3fcf4940549a8a15721e84dd
 calico_crds_archive_checksums:
-  v3.20.2: b75b9965197073d2ae510275f61779ad38ff961ffe95a2fc3e0f452f94949c40
+  v3.21.1: 083e8b98d53bb4e650ef293f106afc0817bb883f3249a54414cd4ceb91d43f69
+  v3.20.3: 371465b790891fc005256558e7cd3c4ae8ce4e6c7d62eb9a7b3dbfbe14faf858
   v3.19.3: 7066d0e6b0136920f82a75a5bd2d595e9f69bd3ab823403e920906569ec6be07
-  v3.18.5: ed7065c5a90b71cf7b3b525d5107a4573bd051c3ff004a56ab6017c222b3e2d6
+  v3.18.6: f8eea12992c41bb4954364e9e4d332b4daf40305688973541110b6268dc0037a
 
 krew_archive_checksums:
   linux: