RSA-768 was already factored in 2009.. cheap now. What surprised me is that RSA keys are much weaker than their size looks. You need 2048 bits to get normal safety, and 768 is far below that.
https://vectree.io/c/how-rsa-key-sizes-map-to-real-security-...