I don't have ca-certificates installed and I have no problem with opkg update, although I'm on LEDE snapshot, not 17.01.0.
I'll append the README, thank you @hnyman.
Good news! Problem solved on 1.5.7-1. I'll keep an eye on it and report back if the issue comes back. Thanks!