diff --git a/MODULE.bazel b/MODULE.bazel
index 764eb6abe72..6c27900a9fb 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -239,24 +239,24 @@ go_deps = use_extension("@gazelle//:extensions.bzl", "go_deps")
 go_deps.from_file(go_mod = "//go/extractor:go.mod")
 use_repo(go_deps, "org_golang_x_mod", "org_golang_x_tools")
 
-lfs_files = use_repo_rule("//misc/bazel:lfs.bzl", "lfs_files")
+lfs_archive = use_repo_rule("//misc/bazel:lfs.bzl", "lfs_archive")
 
-lfs_files(
+lfs_archive(
     name = "ripunzip-linux",
-    srcs = ["//misc/ripunzip:ripunzip-linux"],
-    executable = True,
+    src = "//misc/ripunzip:ripunzip-Linux.zip",
+    build_file = "//misc/ripunzip:BUILD.ripunzip.bazel",
 )
 
-lfs_files(
+lfs_archive(
     name = "ripunzip-windows",
-    srcs = ["//misc/ripunzip:ripunzip-windows.exe"],
-    executable = True,
+    src = "//misc/ripunzip:ripunzip-Windows.zip",
+    build_file = "//misc/ripunzip:BUILD.ripunzip.bazel",
 )
 
-lfs_files(
+lfs_archive(
     name = "ripunzip-macos",
-    srcs = ["//misc/ripunzip:ripunzip-macos"],
-    executable = True,
+    src = "//misc/ripunzip:ripunzip-macOS.zip",
+    build_file = "//misc/ripunzip:BUILD.ripunzip.bazel",
 )
 
 register_toolchains(
diff --git a/misc/ripunzip/BUILD.bazel b/misc/ripunzip/BUILD.bazel
index 6575b692772..fb33124f3b2 100644
--- a/misc/ripunzip/BUILD.bazel
+++ b/misc/ripunzip/BUILD.bazel
@@ -2,7 +2,7 @@ load("@rules_shell//shell:sh_binary.bzl", "sh_binary")
 
 alias(
     name = "ripunzip",
-    actual = select({"@platforms//os:" + os: "@ripunzip-" + os for os in ("linux", "windows", "macos")}),
+    actual = select({"@platforms//os:" + os: "@ripunzip-%s//:ripunzip" % os for os in ("linux", "windows", "macos")}),
     visibility = ["//visibility:public"],
 )
 
diff --git a/misc/ripunzip/BUILD.ripunzip.bazel b/misc/ripunzip/BUILD.ripunzip.bazel
new file mode 100644
index 00000000000..e2832d1e275
--- /dev/null
+++ b/misc/ripunzip/BUILD.ripunzip.bazel
@@ -0,0 +1,11 @@
+load("@bazel_skylib//rules:native_binary.bzl", "native_binary")
+
+native_binary(
+    name = "ripunzip",
+    src = glob(["ripunzip-*"])[0],
+    out = "ripunzip" + select({
+        "@platforms//os:windows": ".exe",
+        "//conditions:default": "",
+    }),
+    visibility = ["//visibility:public"],
+)
diff --git a/misc/ripunzip/ripunzip-Linux.zip b/misc/ripunzip/ripunzip-Linux.zip
new file mode 100644
index 00000000000..d5535b1f17f
--- /dev/null
+++ b/misc/ripunzip/ripunzip-Linux.zip
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:411e5578af004e7be449b6945d50b0984efc3308fe42a0b5c9e82d4be38425e1
+size 4888352
diff --git a/misc/ripunzip/ripunzip-Windows.zip b/misc/ripunzip/ripunzip-Windows.zip
new file mode 100644
index 00000000000..7ef76bfbb0d
--- /dev/null
+++ b/misc/ripunzip/ripunzip-Windows.zip
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0c0bfe3d9c8a2236ecdb574839e83d54c50a019656d26d4d870e8ca26be083dd
+size 1860383
diff --git a/misc/ripunzip/ripunzip-linux b/misc/ripunzip/ripunzip-linux
deleted file mode 100755
index 35606389460..00000000000
--- a/misc/ripunzip/ripunzip-linux
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b5e444b6efcb11e899ff932dc5846927dd78578d0889386d82aa21133e077fde
-size 12423064
diff --git a/misc/ripunzip/ripunzip-macOS.zip b/misc/ripunzip/ripunzip-macOS.zip
new file mode 100644
index 00000000000..e5038c11f90
--- /dev/null
+++ b/misc/ripunzip/ripunzip-macOS.zip
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:dbfbcbcf8303db9ca74a8414312171eadcdb6b1b234b442b2938ee238372fc9d
+size 4067990
diff --git a/misc/ripunzip/ripunzip-macos b/misc/ripunzip/ripunzip-macos
deleted file mode 100755
index d80eeea0667..00000000000
--- a/misc/ripunzip/ripunzip-macos
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e8ff604d47ec88c4a795d307dee9454771589e8bd0b9747c6f49d2a59081f829
-size 10632454
diff --git a/misc/ripunzip/ripunzip-windows.exe b/misc/ripunzip/ripunzip-windows.exe
deleted file mode 100755
index 44727f650db..00000000000
--- a/misc/ripunzip/ripunzip-windows.exe
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:6e6b68c668a84d1232335524f9ca15dff61f7365ec16d57caa9763fda145f33d
-size 4548096