I'm having the same problem. I was able to generate some tickets using a program called TikGenerator, but it only worked for titles that were in the encTitleKeys.bin from an archive of the old titlekeys site.
EDIT: To clarify, I was trying some CDN titles, from a torrent that archived the CDN, that didn't have dumped titlekeys. I ended up using ninfs to mount an NCCH from the contents and then make a cia from that using my 3DS (which had a fake tmd and a fake ticket as a result), then using a fake ticket generated with TikGenerator from my dumped encTitleKeys.bin with the real tmd and CDN contents to build a more legit cia with make_cdn_cia (or probably GM9, too, idk as I haven't tried). For some reason, using TikGenerator didn't work with my encTitleKeys.bin created from the support files function or straight from a ticket.db, but mounting it, selecting all the tickets, and creating an encTitleKeys.bin from them did. See the message below.
Also, ninfs usually wants a decrypted titlekey for CDN contents, so it can decrypt the contents, and you can make a decrypted cia with makerom, but if you enter nothing (or anything random that won't really work, even the ones I tried from the leaked titlekey generation algorithm didn't work), it'll still give you the encrypted NCCH(s) and a nonfunctional 848 byte ticket.bin, as well as a tmd.bin and a tmdchunks.bin, which work fine, except for, of course, the nonfunctional (as stated) 848 byte ticket.bin. By nonfunctional, I mean that nothing seems to be able to open it, so you have to use the 3DS to convert the NCCH(s) to cia(s). For some reason, building a cia straight from CDN contents (at least without a ticket) with GM9 won't work, even though it says it'll use a fake ticket, at least for legit, as I haven't tried standard. I haven't tried building a cia with the tmd from ninfs (at least not tmd + NCCH), either, just the NCCH.
EDIT 2: Forgot to mention that sometimes TikGenerator won't accept your TMD. This is fine, and it'll still create a ticket, but if you want it to be more "proper" to match the TMD you can use a hex editor to change the version number in the ticket if it doesn't match the version number in the tmd once you use make_cdn_cia.