Either the registrar or the registry - the registry seems more likely as there are no requirements to running a country code TLD’s registry on account of ICANN not wanting to anger any government or seem like they have power over ‘government property’.