A Formally Verified Robustness Certifier for Neural Networks (Extended Version)