25 Years of Model Checking