The Switch uses the NRR file format to verify NRO at load time. These files contain hashes of each NRO that is allowed to be loaded by the program. An NRO's SHA-256 hash must match any of the hashes in the hash table. NRRs are signed with RSASSA-PSS-2048/SHA-256.
| Offset | Size | Description |
|---|---|---|
| 0x0 | 0x4 | Magic "NRR0" |
| 0x4 | 0x4 | [9.0.0+] NRR signing key selector |
| 0x8 | 0x8 | Reserved |
| 0x10 | 0x8 | Title ID Mask |
| 0x18 | 0x8 | Title ID Pattern |
| 0x20 | 0x10 | Reserved |
| 0x30 | 0x100 | Modulus for verifying the second signature |
| 0x130 | 0x100 | First signature signed by a Nintendo key, over the above contents |
| 0x230 | 0x100 | Second signature verifiable with the above key, over the rest of the file |
| 0x330 | 0x8 | Title ID |
| 0x338 | 0x4 | File Size |
| 0x33C | 0x4 | Module Type |
| 0x340 | 0x4 | Hash Offset (Always 0x350) |
| 0x344 | 0x4 | Hash Count |
| 0x348 | 0x8 | Reserved |
| 0x350 | 0x20 * Hash Count | NRO hashes (SHA-256) |