Chances are that one of your team devopses have added my magistral provider ASN or IP range into block list.
Im unable to connect to huggingface.co website without VPN, however it works from the different provider.
Would you please check? AS31163
Also maybe you have enforced a policy which is not supported here - TLS1.3 ECH
Thank you!