All unused two letter combinations are reserved for country-code top-level domains. This is to ensure future countries have the ability to have their own TLD. New countries are created perhaps more often than you may think, on average about one per year or two.