Advanced users with special needs can download the Signal APK directly. Most users should not do this under normal circumstances.
This is the SHA-256 fingerprint for the 4096-bit signing certificate:
4B:E4:F6:CD:5B:E8:44:08:3E:90:02:79:DC:82:2A:F6 5A:54:7F:EC:C2:6A:BA:7F:F1:F5:20:3A:45:51:8C:D8
You can use the following command to retrieve and verify the certificate before installation:
apksigner verify -v --print-certs --min-sdk-version 24
Note: Please update to the latest version of the Android SDK Build Tools for the best experience. If your apksigner command is out-of-date and doesn't support the latest Android APK Signature Scheme, you may see the following SHA-256 fingerprint for the 1024-bit signing certificate:
29:F3:4E:5F:27:F2:11:B4:24:BC:5B:F9:D6:71:62:C0
EA:FB:A2:DA:35:AF:35:C1:64:16:FC:44:62:76:BA:26