Signal is able to self-update if installed directly from https://signal.org/android/apk/
That page links to this apk signer tool. I would suggest downloading the apk on your computer, verifying the fingerprint using this tool, then sending the apk file to your phone.
Personally, I'm not too worried about verifying the fingerprint because I know I'm downloading the file straight from signal's website.