As of January 2020, JCenter rejects all non-https connections with a 403 Forbidden. https://jfrog.com/blog/secure-jcenter-with-https/