diff --git a/nlsr.conf b/nlsr.conf
index 752dc44..fd2ad23 100644
--- a/nlsr.conf
+++ b/nlsr.conf
@@ -191,6 +191,34 @@
 
     rule
     {
+      id "NLSR datasets"
+      for data
+      filter
+      {
+        type name
+        regex ^[^<nlsr>]*<nlsr>[<lsdb><routing-table>]
+      }
+      checker
+      {
+        type customized
+        sig-type ecdsa-sha256
+        key-locator
+        {
+          type name
+          hyper-relation
+          {
+            k-regex ^([^<KEY>]*)<KEY><>{1,3}$ ; router key or certificate
+            k-expand \\1
+            h-relation equal
+            p-regex ^([^<nlsr>]*)<nlsr>[<lsdb><routing-table>]
+            p-expand \\1
+          }
+        }
+      }
+    }
+
+    rule
+    {
       id "NLSR Hierarchy Exception Rule"
       for data
       filter